Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The organization must define the appropriate action(s) to be taken if an unauthorized wireless connection is discovered.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-35922 | SRG-MPOL-008 | SV-47238r1_rule | Medium |
| Description |
|---|
| Wireless technologies include, but are not limited to, microwave, satellite, packet radio (UHF/VHF), Wi-Fi, and Bluetooth. Wireless networks present similar security risks to those of a wired network, and since the open airwaves are the communications medium for wireless technology, an entirely new set of risks are introduced. Implementing wireless computing and networking capabilities in accordance with the organization defined wireless policy, within organization-controlled boundaries, allowing only authorized and qualified personnel to configure wireless services, and conducting monitoring and periodic scans for unauthorized wireless access points greatly reduces vulnerabilities. |
| STIG | Date |
|---|---|
| Mobile Policy Security Requirements Guide | 2013-01-24 |
Details
| Check Text ( C-44161r1_chk ) |
|---|
| Review the organization's access control and security policy, along with any other relevant documentation, to verify the organization has defined actions to be taken when unauthorized wireless connections are discovered. If the organization has not defined the appropriate actions, this is a finding. |
| Fix Text (F-40448r1_fix) |
|---|
| Define and document the appropriate action(s) to be taken when unauthorized wireless connections are discovered. |