Foreign/Local National personnel have duties or access privileges that exceed those allowed by DODI 8500.2 E3.4.8.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-8520	DSN06.03	SV-9017r1_rule	ECAN-1 PECF-1	Medium

Description
Requirement: The IAO and IAM will ensure that all Foreign/Local National personnel hired by a base/post/camp/station for the purpose of operating or performing OAM&P / NM functions on DSN switches and subsystems shall be granted duties and system access in accordance with DODI 8500.2 E3.4.8. All SAs and particularly those who are foreign or local nationals must not be given duties or access privileges that exceed those allowed by DoD policy and must only be granted enough access as required to perform the assigned duties.Failure to do this may result in unauthorized access or compromise.

Description

Requirement: The IAO and IAM will ensure that all Foreign/Local National personnel hired by a base/post/camp/station for the purpose of operating or performing OAM&P / NM functions on DSN switches and subsystems shall be granted duties and system access in accordance with DODI 8500.2 E3.4.8. All SAs and particularly those who are foreign or local nationals must not be given duties or access privileges that exceed those allowed by DoD policy and must only be granted enough access as required to perform the assigned duties.Failure to do this may result in unauthorized access or compromise.

STIG	Date
Defense Switched Network STIG	2015-01-02

Details

Check Text ( C-7650r1_chk )
Interview the IAO and/or SA to confirm compliance through discussion, review of site policy and procedures, diagrams, documentation, configuration files, logs, records, DAA/other approvals, etc as applicable.

Fix Text (F-7968r1_fix)
Implement processes / procedures, generate documents, and/or adjust configuration(s) / architecture, as necessary to comply with policy.