Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-6763 | KVM04.010.00 | SV-6985r2_rule | DCBP-1 | High |
Description |
---|
Input devices attached to A/B switches that are in turn attached to ISs of different classification levels could input data to the wrong IS compromising sensitive or classified data and/or the IS involved. Output from output devices attached to A/B switches that are in turn attached to ISs of different classification levels could be picked up by an individual other than the one the data was intended, leading to a compromise of sensitive or classified data. The ISSO will ensure input and output devices including but not limited to scanners, printers, or plotters are not attached to A/B switches that span classification levels. |
STIG | Date |
---|---|
Keyboard Video and Mouse Switch STIG | 2015-12-09 |
Check Text ( C-2910r2_chk ) |
---|
The reviewer will view the A/B switch to verify input and output devices including, but not limited to, scanners, printers, or plotters are not attached to an A/B switch that spans classification levels. If input and output devices are attached to an A/B switch that spans classification levels, this is a finding. |
Fix Text (F-6416r2_fix) |
---|
Remove the A/B switch attached to ISs of different classification levels and an input or output peripheral. |