Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-8535 | DSN17.06 | SV-9032r2_rule | Medium |
Description |
---|
All DSN system major software releases must be tested on non-production systems and hardware prior to use to determine the effects the new software will have on systems operations and security. DoD policy mandates testing on non-production configurations. |
STIG | Date |
---|---|
Defense Switched Network (DSN) STIG | 2017-01-19 |
Check Text ( C-62269r1_chk ) |
---|
Review site documentation to confirm the DSN local system major software version releases on production systems are on the DoD APL. If the DSN local system major software version releases on production systems are not on the DoD APL, this is a finding. |
Fix Text (F-67183r1_fix) |
---|
Implement and document the DSN local system with major software version releases listed on the DoD APL. Ensure only VVoIP systems listed on the DoD APL are connected to the DSN. Sponsor the system for DSN APL testing and certification. |