UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Mobile operating system (OS) based CMDs and systems must not be used to send, receive, store, or process classified messages unless specifically approved by NSA for such purposes and NSA approved transmission and storage methods are used.


Overview

Finding ID Version Rule ID IA Controls Severity
V-24960 WIR-SPP-005 SV-30697r5_rule High
Description
DoDD 8100.2 states wireless devices will not be used for classified data unless approved for such use. Classified data could be exposed to unauthorized personnel.
STIG Date
Commercial Mobile Device (CMD) Policy Security Technical Implementation Guide (STIG) 2016-09-30

Details

Check Text ( C-31119r7_chk )
Interview the ISSO.

Verify written policy and training material exists (or requirement is listed on a signed user agreement) stating if and when CMDs can be used to transmit classified information.

If written policy or training material does not exist, stating if and when CMDs can be used to receive, transmit, or process classified information, this is a finding.
Fix Text (F-27587r5_fix)
Publish written policy or training material stating if and when CMDs can be used to process, send, or receive classified information.