Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-19143 | SRC-EPT-070 | SV-20956r1_rule | ECSC-1 | Low |
Description |
---|
Lack of user training as evidenced by signed documentation may indicate the users lack understanding of their responsibilities to safeguard the network and be a significant vulnerability to the enclave. |
STIG | Date |
---|---|
Remote Access Policy STIG | 2015-09-16 |
Check Text ( C-22763r1_chk ) |
---|
Inspect a copy of the site’s user agreement. Verify user agreement has the current consent provision exactly as written by DoD for legal purposes. |
Fix Text (F-19694r1_fix) |
---|
Ensure remote user agreement contains a Standard Mandatory Notice and Consent Provision. |