Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-6710 | KVM03.006.00 | SV-6907r2_rule | IAGA-1 | High |
Description |
---|
Usage of group or shared user ids makes it impossible to attribute an action to the originating user. In the case of a malicious action this could make prosecution impossible. The ISSO will ensure group or shared user ids are not used. |
STIG | Date |
---|---|
Keyboard Video and Mouse Switch STIG | 2015-12-09 |
Check Text ( C-2722r3_chk ) |
---|
The reviewer will interview the ISSO and verify that group or shared user ids are not being used. If group or shared user ids are being used, this is a finding. |
Fix Text (F-6317r2_fix) |
---|
Remove the shared or group user ids and issue individual user ids to each user that requires access to the network attached KVM switch. |