The network device must enforce requirements for the connection of mobile devices to organizational information systems.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000072-NDM-NA	SRG-NET-000072-NDM-NA	SRG-NET-000072-NDM-NA_rule		Medium

Description
This control requires access control for portable and mobile devices. Mobile devices include portable storage media (e.g., USB memory sticks, external hard disk drives) and portable computing and communications devices with information storage capability (e.g., notebook/laptop computers, personal digital assistants, cellular telephones, digital cameras, audio recording devices). Unless restrictions are put in place, a user connecting to the enclave via a mobile device can access/perform everything as those connected via Ethernet. Enforcement requirements for the connection of mobile devices to organizational information systems are outside the scope of network device management.

Description

This control requires access control for portable and mobile devices. Mobile devices include portable storage media (e.g., USB memory sticks, external hard disk drives) and portable computing and communications devices with information storage capability (e.g., notebook/laptop computers, personal digital assistants, cellular telephones, digital cameras, audio recording devices). Unless restrictions are put in place, a user connecting to the enclave via a mobile device can access/perform everything as those connected via Ethernet. Enforcement requirements for the connection of mobile devices to organizational information systems are outside the scope of network device management.

STIG	Date
Network Device Management Security Requirements Guide	2013-07-30

Details

Check Text ( C-SRG-NET-000072-NDM-NA_chk )
This requirement is NA for network device management.

Fix Text (F-SRG-NET-000072-NDM-NA_fix)
This requirement is NA for network device management.