The network element must enforce a two-person rule for changes to organizationally defined information system components and system-level information.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| SRG-NET-000122-RTR-NA | SRG-NET-000122-RTR-NA | SRG-NET-000122-RTR-NA_rule | Medium |
| Description |
|---|
| Changes to any software components of the network element can have significant effects on the overall security of the network. Therefore, only qualified and authorized individuals should be allowed administrative access to the network element for implementing any changes or upgrades to system components. Enforcing a two-person rule will ensure the changes have been approved. This requirement is applicable to network device management and is not applicable to the routing function. |
| STIG | Date |
|---|---|
| Router Security Requirements Guide | 2013-07-30 |
Details
| Check Text ( C-SRG-NET-000122-RTR-NA_chk ) |
|---|
| This requirement is NA for router. |
| Fix Text (F-SRG-NET-000122-RTR-NA_fix) |
|---|
| This requirement is NA for router. |