Major software version upgrades have NOT been tested, certified, and placed on the DSN APL before installation.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-8535	DSN17.06	SV-9032r1_rule	DCAS-1 EBCR-1 ECSC-1	Medium

Description

Requirement: The IAO will ensure that major software version upgrades have been tested, certified, and placed on the DSN APL before installation. All new system major software releases must be tested on non-production systems/hardware prior to use / installation to determine the effects that the new software will have on systems operations and security. This is a requirement under DODI 8100.3 for system software.

STIG	Date
Defense Switched Network STIG	2015-01-02

Details

Check Text ( C-7374r1_chk )
Review current configuration files of effected devices to confirm compliance

Fix Text (F-7968r1_fix)
Implement processes / procedures, generate documents, and/or adjust configuration(s) / architecture, as necessary to comply with policy.