Remote user agreement will contain a Standard Mandatory Notice and Consent Provision.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-19143	SRC-EPT-070	SV-20956r1_rule		Low

Description
Lack of user training as evidenced by signed documentation may indicate the users lack understanding of their responsibilities to safeguard the network and be a significant vulnerability to the enclave.

STIG	Date
Remote Access Policy STIG	2016-03-28

Details

Check Text ( C-22763r1_chk )
Inspect a copy of the site’s user agreement. Verify user agreement has the current consent provision exactly as written by DoD for legal purposes.

Fix Text (F-19694r1_fix)
Ensure remote user agreement contains a Standard Mandatory Notice and Consent Provision.