Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Application development must not occur on DoD operational network segments.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-39436 | ENTD0060 | SV-51294r1_rule | ECSC-1 | Medium |
| Description |
|---|
| To reduce the risk of compromise of DoD operational networks and data, application and system development needs to be limited to systems within a network segment designated for development only. |
| STIG | Date |
|---|---|
| Test and Development Zone A Security Technical Implementation Guide | 2018-09-17 |
Details
| Check Text ( C-46711r5_chk ) |
|---|
| Review the organization's network diagrams to determine whether network segments for development have been established and outlined in the documentation. If application development occurs on DoD operational networks, this is a finding. If there isn't any application development occurring in the zone environment, this requirement is not applicable. |
| Fix Text (F-44449r1_fix) |
|---|
| Designate network segments for applications and systems development. Document these designated network segments in the network diagrams for the T&D environment. |