An Information System Security Officer (ISSO) must be appointed in writing for each site.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-7979	DSN16.01	SV-8465r2_rule		Medium

Description
The PMO or local site command will document and ensure that an ISSO is designated to oversee the IA posture and security of each site, system, and facility. The ISSO will have the proper training and clearance level. The PMO will maintain documentation regarding ISSO assignments for all sites and systems in the inventory. The ISSO may have responsibility for systems other than DSN and may be responsible for remote sites attached to the main site or system. The local commander for DSN switch must appoint an ISSO to develop a security plan and manage its implementation.

Description

The PMO or local site command will document and ensure that an ISSO is designated to oversee the IA posture and security of each site, system, and facility. The ISSO will have the proper training and clearance level. The PMO will maintain documentation regarding ISSO assignments for all sites and systems in the inventory. The ISSO may have responsibility for systems other than DSN and may be responsible for remote sites attached to the main site or system. The local commander for DSN switch must appoint an ISSO to develop a security plan and manage its implementation.

STIG	Date
Defense Switched Network (DSN) STIG	2017-01-19

Details

Check Text ( C-61957r1_chk )
Review site documentation to confirm an ISSO is appointed in writing. If an ISSO is not appointed in writing, this is a finding.

Fix Text (F-7554r2_fix)
The PMO or local site command must appoint an ISSO in writing. This individual is responsible for establishing, implementing, monitoring, and controlling the site telephone system security program, which ensures the evaluation of all sites telephone system components.