UCF STIG Viewer Logo

Network infrastructure and systems supporting the test and development environment must be documented within the organizations accreditation package.


Overview

Finding ID Version Rule ID IA Controls Severity
V-39344 ENTD0010 SV-51202r1_rule DCHW-1 Medium
Description
Up-to-date documentation is essential in assisting with the management, auditing, and security of the network infrastructure used to support the test and development environment. Network diagrams are important because they show the overall layout where devices are physically located within the network infrastructure. Diagrams also show the relationship and connectivity between devices where possible intrusive attacks could take place. Having up-to-date network diagrams will also help show what the security, traffic, and physical impact of adding a system will be on the network.
STIG Date
Test and Development Zone B Security Technical Implementation Guide 2015-12-17

Details

Check Text ( C-46619r2_chk )
Review the accreditation package documentation to verify the test and development environment is correctly documented within the network diagrams and site security plan. If the organization's accreditation package does not include the test and development infrastructure in the network diagrams and system security plan, this is a finding.
Fix Text (F-44359r2_fix)
Document network infrastructure and systems supporting the test and development environment, then include it with the accreditation package.