The organization must document and take appropriate action if an unauthorized wireless connection is discovered.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-35921	SRG-MPOL-007	SV-47237r1_rule		Medium

Description
Wireless technologies include, but are not limited to, microwave, satellite, packet radio (UHF/VHF), Wi-Fi, and Bluetooth. Wireless networks present similar security risks to those of a wired network, and since the open airwaves are the communications medium for wireless technology, an entirely new set of risks are introduced. Implementing wireless computing and networking capabilities in accordance with the organization defined wireless policy, within organization-controlled boundaries, allowing only authorized and qualified personnel to configure wireless services, and conducting monitoring and periodic scans for unauthorized wireless access points greatly reduces vulnerabilities.

Description

Wireless technologies include, but are not limited to, microwave, satellite, packet radio (UHF/VHF), Wi-Fi, and Bluetooth. Wireless networks present similar security risks to those of a wired network, and since the open airwaves are the communications medium for wireless technology, an entirely new set of risks are introduced. Implementing wireless computing and networking capabilities in accordance with the organization defined wireless policy, within organization-controlled boundaries, allowing only authorized and qualified personnel to configure wireless services, and conducting monitoring and periodic scans for unauthorized wireless access points greatly reduces vulnerabilities.

STIG	Date
Mobile Policy Security Requirements Guide	2013-07-03

Details

Check Text ( C-44160r1_chk )
Review the organization's access control and security policy, along with any other relevant documentation, to verify the organization documents and takes the appropriate actions when unauthorized wireless connections are discovered. If the organization does not follow the defined procedures, this is a finding.

Fix Text (F-40447r1_fix)
Update documented procedures to document and take appropriate action if an unauthorized wireless connection is discovered.