UCF STIG Viewer Logo

Network infrastructure and systems supporting the test and development environment must follow DoD certification and accreditation procedures before connecting to a DoD operational network or Internet Service Provider.


Overview

Finding ID Version Rule ID IA Controls Severity
V-39345 ENTD0020 SV-51203r1_rule EBCR-1 Medium
Description
Prior to connecting to a live operational network, such as the DISN, systems, at minimum, receive an IATO. A system without an IATO does not show adequate effort to meet IA controls and security requirements and may pose a risk to other computers or systems connecting to the operational network.
STIG Date
Test and Development Zone A Security Technical Implementation Guide 2015-12-17

Details

Check Text ( C-46707r5_chk )
Review the accreditation package documentation to verify the test and development environment has been granted an IATO to connect to the DISN. If an IATO has not been granted, this is a finding.

If the zone environment does not have any connectivity to the DISN or commercial ISP, this requirement is not applicable.
Fix Text (F-44662r1_fix)
Certify and accredit the test and development infrastructure and supporting systems connecting to the DISN. Keep the IATO with the organization's accreditation package.