The organization must create a policy and procedures document for proper handling and transport of data entering (physically or electronically) the test and development environment.

Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The organization must create a policy and procedures document for proper handling and transport of data entering (physically or electronically) the test and development environment.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-43317	ENTD0370	SV-56070r1_rule		Medium

Description
Without policies and procedures in place, the organization will not have the authority to hold personnel accountable for improperly handling or transporting data into the test and development environment. The documents need to include guidance for both physical and electronic data migration.

STIG	Date
Test and Development Zone A Security Technical Implementation Guide	2018-09-17

Details

Check Text ( C-49290r2_chk )
Review the organization's policies and procedures document to ensure proper handling of data being transported into the test and development environment. This document must include information for physical and electronic migration of data. If the organization does not have a policy and procedures document created or available for review, this is a finding.

Fix Text (F-48944r1_fix)
Create a policy for, and document the procedure of, proper handling of data transported into the test and development environment. This document must include information for physical and electronic handling and migration of data.