The Test Manager will ensure tests plans and procedures are created and executed prior to each release of the application or updates to system patches.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-16826	APP5050	SV-17826r1_rule	DCCT-1	Medium

Description
Without test plans and procedures for application releases or updates, unexpected results may occur which could lead to a denial of service to the application or components.

STIG	Date
Application Security and Development Checklist	2014-12-22

Details

Check Text ( C-17825r1_chk )
Ask the application representative to provide tests plans, procedures, and results to ensure they are updated for each application release or updates to system patches. If the application is a COTS/GOTS product or is composed of only COTS/GOTS products with no custom code, this check does not apply unless the application is being reviewed by or in conjunction with the COTS/GOTS vendor in which case this check is applicable. 1) If test plans, procedures, and results do not exist or are not updated for each application release or updates to system patches, this is a finding.

Check Text ( C-17825r1_chk )

Ask the application representative to provide tests plans, procedures, and results to ensure they are updated for each application release or updates to system patches.

If the application is a COTS/GOTS product or is composed of only COTS/GOTS products with no custom code, this check does not apply unless the application is being reviewed by or in conjunction with the COTS/GOTS vendor in which case this check is applicable.

1) If test plans, procedures, and results do not exist or are not updated for each application release or updates to system patches, this is a finding.

Fix Text (F-17143r1_fix)
Executed tests plans prior to release or patch update.