Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-39435 | ENTD0050 | SV-51293r1_rule | EBCR-1 ECSD-1 | Medium |
Description |
---|
An impersistent connection is any temporary connection needed to another test and development environment or DoD operational network where testing is not feasible. As any unvetted connection or device will create additional risk and compromise the entire environment, it is up to the Authorizing Official for the organization to accept the risk of an impersistent connection. |
STIG | Date |
---|---|
Test and Development Zone A Security Technical Implementation Guide | 2018-09-17 |
Check Text ( C-46709r3_chk ) |
---|
Review documentation for impersistent connections or devices to ensure the risk has been thoroughly assessed and approved by the Authorizing Official. If no documented approval is available for impersistent connections, this is a finding. |
Fix Text (F-44448r4_fix) |
---|
Create and have on file up-to-date documentation of the authorized risk approval for impersistent connections or devices. |