Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-30369 | WIR0231 | SV-40029r1_rule | ECWN-1 | High |
Description |
---|
The longer a key remains in use, the more likely it will be compromised. If an adversary can compromise an SWLAN key, then it can obtain classified information. |
STIG | Date |
---|---|
Harris SecNet 11 / 54 Security Technical Implementation Guide | 2011-10-07 |
Check Text ( C-39044r1_chk ) |
---|
Detailed Policy Requirements: SWLAN system will be rekeyed at least every 90 days. Check Procedures: Interview IAO and obtain the site’s procedures for rekeying the WLAN. Mark a finding if the procedures do not exist or they do not include a requirement to rekey at least every 90 days. |
Fix Text (F-34145r1_fix) |
---|
Write and implement rekeying procedures that specify the keys must be changed at least every 90 days. |