Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-6763 | KVM04.010.00 | SV-6985r1_rule | DCBP-1 | High |
Description |
---|
Input devices attached to A/B switches that are in turn attached to ISs of different classification levels could input data to the wrong IS compromising sensitive or classified data and/or the IS involved. Output from output devices attached to A/B switches that are in turn attached to ISs of different classification levels could be picked up by an individual other than the one the data was intended, leading to a compromise of sensitive or classified data. The IAO will ensure input and output devices including but not limited to scanners, printers or plotters are not attached to A/B switches that span classification levels. |
STIG | Date |
---|---|
Keyboard Video and Mouse Switch STIG | 2014-08-04 |
Check Text ( C-2910r1_chk ) |
---|
The reviewer will view the A/B switch to verify that input and output devices including, but not limited to, scanners, printers or plotters are not attached to an A/B switch that spans classification levels. |
Fix Text (F-6416r1_fix) |
---|
Remove the A/B switch that is attached to an input or output peripheral and the A/B switch is connected to ISs of different classification levels. |