There is no user documentation describing the correct usage and users responsibilities for an A/B switch.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-6719	KVM04.002.00	SV-6922r1_rule	PRRB-1	Low

Description
The Security Features Users Guide (SFUG) gives the users a single source to find security policy and guidance as to the users responsibility for security. The general policies and user responsibilities as apply to A/B switches and any local security policies will be placed in the SFUG or similar document. The IAO will maintain and distribute to the users a SFUG that describes the correct uses of the switch and the users responsibilities.

Description

The Security Features Users Guide (SFUG) gives the users a single source to find security policy and guidance as to the users responsibility for security. The general policies and user responsibilities as apply to A/B switches and any local security policies will be placed in the SFUG or similar document. The IAO will maintain and distribute to the users a SFUG that describes the correct uses of the switch and the users responsibilities.

STIG	Date
Keyboard Video and Mouse Switch STIG	2014-08-04

Details

Check Text ( C-2760r1_chk )
The reviewer will interview the IAO and view the SFUG or equivalent documentation to verify that the following points are discussed. 1. A/B switches should be used only if there is no other solution. 2. A/B switches should be used only to connect multiple peripheral devices to a single IS. 3. A/B switches should never be used to connect a single peripheral to multiple ISs. 4. If an A/B switch is used to connect or share peripheral devices between two or more ISs, the ISs should be intended for the use of a single user within the users work area, and be visible from all ISs that it is attached.

Check Text ( C-2760r1_chk )

The reviewer will interview the IAO and view the SFUG or equivalent documentation to verify that the following points are discussed.
1. A/B switches should be used only if there is no other solution.
2. A/B switches should be used only to connect multiple peripheral devices to a single IS.
3. A/B switches should never be used to connect a single peripheral to multiple ISs.
4. If an A/B switch is used to connect or share peripheral devices between two or more ISs, the ISs should be intended for the use of a single user within the users work area, and be visible from all ISs that it is attached.

Fix Text (F-6337r1_fix)
Create a section in the sites SFUG that contains general security policies and guidance plus the site security policies and guidance for use of an A/B switch.