Control ID: CA-OPS-009
Control Name: CA Audit Filter Validation
Severity: Critical
Status: Failure
Certificate Authority: securetron-lab-ISSUINGCA
Execution Time: 2025-10-15 22:43:13
Duration: 00:00:00.0088115

Expected Result:
CA audit filter should be 127 for full auditing

Evidence:
Audit Filter Validation for securetron-lab-ISSUINGCA:
  Current AuditFilter Value: 125
  Required for Full Auditing: 127
  Compliant: NO

Audit Filter Analysis:
  Current value enables 6 out of 7 audit categories
  Missing Categories (1):
    ✗ 2: Back up/restore CA database

To enable full auditing, set AuditFilter to 127.


Recommendation:
Set AuditFilter registry value to 127 to enable full auditing.
