MFDs with print, copy, scan, or fax capabilities must be prohibited on classified networks without the approval of the DAA.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-6800	MFD07.001	SV-7025r2_rule	DCBP-1	High

Description
MFDs with print, copy, scan, or fax capabilities, if compromised, could lead to the compromise of classified data or the compromise of the network. The IAO will ensure MFDs with copy, scan, or fax capabilities are not allowed on classified networks unless approved by the DAA.

STIG	Date
Multifunction Device and Network Printers STIG	2019-10-07

Details

Check Text ( C-3012r4_chk )
The reviewer will interview the IAO to verify that MFDs with print, copy, scan, or fax capabilities are prohibited on classified networks unless approved by the DAA.

Fix Text (F-6472r4_fix)
Remove the MFD from the classified network until DAA approval is obtained.