UCF STIG Viewer Logo

Peripherals other than a keyboard, video, or mouse are attached to a KVM switch that is attached to ISs of different classification levels.


Overview

Finding ID Version Rule ID IA Controls Severity
V-6703 KVM02.009.00 SV-6884r1_rule DCBP-1 High
Description
It will be assumed that any peripheral other than a keyboard, video monitor, or mouse attached to a KVM switch is intended to be used regardless of the current configuration of the KVM switch. This peripheral can contain persistent memory that can be used to move data between ISs of different classification levels compromising either the data that was moved and the IS to which the data was moved. When the KVM switch is attached to ISs of different classification levels, the IAO, the SA, and the user will ensure that no peripheral other than the keyboard, video, or mouse is connected to the KVM.
STIG Date
Keyboard Video and Mouse Switch STIG 2014-08-04

Details

Check Text ( C-2683r1_chk )
The reviewer will view the KVM switch, used in an environment where it is attached to ISs of different clearance levels, to verify that no peripherals other than the keyboard, video, and mouse are attached.
Fix Text (F-6298r1_fix)
Remove the unauthorized peripheral and block the ports it is attached to with tamper resistant seals.