The identity of maintenance personnel installing or modifying a device or software must be verified and recorded.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-7983	DSN17.01	SV-8469r2_rule	ECSC-1 PECF-1	Medium

Description
The identity of maintenance personnel performing software load upgrades or maintenance of a DSN component must be recorded. This will make a particular person or vendor representative accountable for all actions performed, giving the ISSO and site personnel the means to investigate activity. The preferred means of maintaining records is to obtain a DD form 2875 from all individuals performing work on the system.

Description

The identity of maintenance personnel performing software load upgrades or maintenance of a DSN component must be recorded. This will make a particular person or vendor representative accountable for all actions performed, giving the ISSO and site personnel the means to investigate activity. The preferred means of maintaining records is to obtain a DD form 2875 from all individuals performing work on the system.

STIG	Date
Defense Switched Network (DSN) STIG	2015-08-11

Details

Check Text ( C-62261r1_chk )
Review site documentation to confirm the identity of maintenance personnel installing or modifying a device or software is verified and recorded. Use of DD form 2875 is the preferred method to obtain identity information. If the identity of maintenance personnel installing or modifying a device or software is not verified and recorded, this is a finding.

Fix Text (F-7558r2_fix)
Implement the use of DD Form 2875 to verify and record the identity of maintenance personnel installing or modifying a device or software on a DSN component. This list should contain military, civilian personnel, and vendor representatives.