Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Procedures are not in place to notify users when an application is decommissioned.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-16838 | APP6070 | SV-17838r1_rule | DCSD-1 | Low |
| Description |
|---|
| When maintenance no longer exists for an application, there are no individuals responsible for making security updates. The application should maintain procedures for decommissioning. |
| STIG | Date |
|---|---|
| Application Security and Development Checklist | 2014-04-03 |
Details
| Check Text ( C-17844r1_chk ) |
|---|
| Interview the application representative to determine if provisions are in place to notify users when an application is decommissioned. 1) If provisions are not in place to notify users when an application is decommissioned, it is a finding. |
| Fix Text (F-17158r1_fix) |
|---|
| Create and establish procedures to notify users when an application is decommissioned. |