The IDPS must enforce a two-person rule for changes to organizationally defined information system components and system-level information.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000122-IDPS-000113	SRG-NET-000122-IDPS-000113	SRG-NET-000122-IDPS-000113_rule		Medium

Description
Changes to any software components of the IDPS can have significant effects on the overall security of the network. Therefore, only qualified and authorized individuals should be allowed administrative access to the IDPS for implementing any changes or upgrades to system components. Enforcing a two-person rule will ensure the changes have been approved.

STIG	Date
IDPS Security Requirements Guide (SRG)	2012-03-08

Details

Check Text ( C-43244_chk )
Review the configuration to verify the settings required to implement two-person rule are enabled. If the two-person rule is required and the IDPS has not been configured to automate the requirement, this is a finding.

Fix Text (F-43244_fix)
Configure the IDPS to require two-person rule for organizationally defined privileged commands.