Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-16825 | APP5040 | SV-17825r1_rule | DCII-1 | Medium |
Description |
---|
IA assessment of proposed changes is necessary to ensure security integrity is maintained within the application. |
STIG | Date |
---|---|
Application Security and Development Checklist | 2014-12-22 |
Check Text ( C-17824r1_chk ) |
---|
Interview the application representative and determine if changes to the application are assessed for IA impact prior to implementation. Review the CCB process documentation to ensure potential changes to the application are evaluated to determine impact. An informal group may be tasked with impact assessment of upcoming version changes. 1) If impact analysis is not performed, it is a finding. |
Fix Text (F-17141r1_fix) |
---|
Assess changes to the application for IA impact prior to implementation. |