Scan to a file share is enabled but the file shares do not have the appropriate discretionary access control list in place.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-6802	MFD07.003	SV-7027r1_rule		Low

Description
Without appropriate discretionary access controls unauthorized individuals may read the scanned data. This can lead to a compromise of sensitive data. The SA will ensure file shares have the appropriate discretionary access control list in place if scan to a file share is enabled.

STIG	Date
Multifunction Device and Network Printers STIG	2019-10-07

Details

Check Text ( C-3017r1_chk )
The reviewer will, with the assistance of the SA, verify that file shares have the appropriate discretionary access control list in place if scan to a file share is enabled.

Fix Text (F-6476r1_fix)
Create the appropriate discretionary access control list for file shares if scan to a file share is enabled.