Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-6800 | MFD07.001 | SV-7025r2_rule | DCBP-1 | High |
Description |
---|
MFDs with print, copy, scan, or fax capabilities, if compromised, could lead to the compromise of classified data or the compromise of the network. The IAO will ensure MFDs with copy, scan, or fax capabilities are not allowed on classified networks unless approved by the DAA. |
STIG | Date |
---|---|
Multifunction Device and Network Printers STIG | 2019-01-04 |
Check Text ( C-3012r4_chk ) |
---|
The reviewer will interview the IAO to verify that MFDs with print, copy, scan, or fax capabilities are prohibited on classified networks unless approved by the DAA. |
Fix Text (F-6472r4_fix) |
---|
Remove the MFD from the classified network until DAA approval is obtained. |