Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-6710 | KVM03.006.00 | SV-6907r1_rule | IAGA-1 | High |
Description |
---|
Usage of group or shared userids makes it impossible to attribute an action to the originating user. In the case of a malicious action this could make prosecution impossible. The IAO will ensure that group or shared userids are not used. |
STIG | Date |
---|---|
Keyboard Video and Mouse Switch STIG | 2014-08-04 |
Check Text ( C-2722r1_chk ) |
---|
The reviewer will interview the IAO verify that a group or shared userids are not being used. |
Fix Text (F-6317r1_fix) |
---|
Remove the shared or group userid and issue individual userids to each user who requires access to the network attached KVM switch. |