UCF STIG Viewer Logo

Personal Identification Numbers (PIN) assigned to special subscribers used to control Direct Inward System Access and Voice Mail services are not being controlled like passwords and deactivated when no longer required.


Overview

Finding ID Version Rule ID IA Controls Severity
V-7943 DSN07.03 SV-8429r1_rule ECSC-1 Low
Description
The PIN used to control access to the DISA feature should be controlled much like a special access code or password. If this PIN is not changed periodically and deactivated when no longer required, the DISA feature is more likely to be compromised, thus degrading system access security.
STIG Date
Defense Switched Network (DSN) STIG 2017-01-19

Details

Check Text ( C-7324r1_chk )
Interview the IAO or SA and confirm compliance through discussion, review of site policy, diagrams, documentation, DAA approvals, etc as applicable.
Fix Text (F-7968r1_fix)
Implement processes / procedures, generate documents, and/or adjust configuration(s) / architecture, as necessary to comply with policy.