Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-260002 | SRG-NET-000088-VVSM-00101 | SV-260002r948967_rule | Medium |
Description |
---|
It is critical for the appropriate personnel to be aware if a system is at risk of failing to process session records. Without this notification, the security personnel may be unaware of an impending failure of the session record capability. Session record processing failures include software/hardware errors, failures in the capturing mechanisms, and storage capacity being reached or exceeded. This requirement applies to each session record data storage repository (i.e., distinct information system component where session records are stored), the centralized session record storage capacity of organizations (i.e., all session record data storage repositories combined), or both. |
STIG | Date |
---|---|
Enterprise Voice, Video, and Messaging Session Management Security Requirements Guide | 2024-03-11 |
Check Text ( C-63733r948965_chk ) |
---|
Verify the Enterprise Voice, Video, and Messaging Session Manager alerts the ISSO and SA (at a minimum) in the event of a session record system failure. If the Enterprise Voice, Video, and Messaging Session Manager does not alert the ISSO and SA (at a minimum) in the event of a session record system failure, this is a finding. |
Fix Text (F-63640r948966_fix) |
---|
Configure the Enterprise Voice, Video, and Messaging Session Manager to alert the ISSO and SA (at a minimum) in the event of a session record system failure. |