The network device must allow the association of security attributes with information by authorized system administrators.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000060-NDM-NA	SRG-NET-000060-NDM-NA	SRG-NET-000060-NDM-NA_rule		Medium

Description
If unauthorized individuals have permission to change security attribute information associations, these individuals may compromise information flow and access control attributes, thus adversely impacting network availability or gaining unauthorized access to the information. The support provided by network devices may include: (i) Prompting users to select specific security attributes to be associated with specific information objects; (ii) Employing automated mechanisms for categorizing information with appropriate attributes based on defined policies; or (iii) Ensuring the combination of selected security attributes selected is valid. Note that organizations must consider the creation, deletion, or modification of security attributes when defining auditable events. This requirement is applicable to specific devices and does not involve the management of a network device.

Description

If unauthorized individuals have permission to change security attribute information associations, these individuals may compromise information flow and access control attributes, thus adversely impacting network availability or gaining unauthorized access to the information. The support provided by network devices may include: (i) Prompting users to select specific security attributes to be associated with specific information objects; (ii) Employing automated mechanisms for categorizing information with appropriate attributes based on defined policies; or (iii) Ensuring the combination of selected security attributes selected is valid. Note that organizations must consider the creation, deletion, or modification of security attributes when defining auditable events. This requirement is applicable to specific devices and does not involve the management of a network device.

STIG	Date
Network Device Management Security Requirements Guide	2013-07-30

Details

Check Text ( C-SRG-NET-000060-NDM-NA_chk )
This requirement is NA for network device management.

Fix Text (F-SRG-NET-000060-NDM-NA_fix)
This requirement is NA for network device management.