A Secure WLAN (SWLAN) connected to the SIPRNet must have a SIPRNet connection approval package on file with the Classified Connection Approval Office (CCAO).

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36594	WIR-CWLAN-05	SV-48096r1_rule	ECWN-1	High

Description
The CCAO approval process provides assurance that the SWLAN use is appropriate and does not introduce unmitigated risks into the SIPRNET.

STIG	Date
CSfC Campus WLAN Policy Security Implementation Guide	2014-03-19

Details

Check Text ( C-44835r1_chk )
Review documentation. Verify the SWLAN system CCAO approval documentation exists and has been approved and has a SIPRNet Interim Approval to Operate (IATO) or Approval to Operate (ATO) in GIAP database. If CCAO approval documentation is not available, this is a finding.

Fix Text (F-41234r1_fix)
Disable or remove the non-compliant SWLAN until the site has all required approvals for operation.