Command and Control (C2) and non-C2 exceptions of SIPRNet must be documented in the enclaves accreditation package and an Authority to Connect (ATC) or Interim ATC amending the connection approval received prior to implementation.

Command and Control (C2) and non-C2 exceptions of SIPRNet must be documented in the enclaves accreditation package and an Authority to Connect (ATC) or Interim ATC amending the connection approval received prior to implementation.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-14742	NET1827	SV-15498r2_rule		Medium

Description
Any exception to use SIPRNet must be documented in an update to the enclave’s accreditation package and an Authority to Connect (ATC) or Interim ATC amending the connection approval received prior to implementation.

STIG	Date
Network Infrastructure Policy Security Technical Implementation Guide	2017-03-02

Details

Check Text ( C-12964r2_chk )
Review SIPRNet accreditation package and an Interim Authority to Connect/Authority to Connect (IATC/ATC) amending the connection approval received. If C2 and non-C2 exceptions are not documented, this is a finding.

Fix Text (F-14208r1_fix)
Document all SIPRNet connections.