Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-18582 | WIR0215 | SV-20126r4_rule | ECWN-1 | High |
Description |
---|
The CCAO approval process provides assurance that the SWLAN use is appropriate and does not introduce unmitigated risks into the SIPRNET. |
STIG | Date |
---|---|
Harris SecNet 11 / 54 Security Technical Implementation Guide | 2011-10-07 |
Check Text ( C-22005r2_chk ) |
---|
Review documentation. - Verify the SWLAN system SCAO approval documentation exists and has been approved and has a SIPRNet or NIPRNet Interim Approval to Operate (IATO) or Approval to Operate (ATO) in GIAP database. - Verify the SWLAN system is included in the SSAA/SSP and is signed by the DAA. Mark as a finding if requirements are not met. |
Fix Text (F-34118r1_fix) |
---|
Disable or remove the non-compliant SWLAN until the site has all required approvals for operation. |