Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-39344 | ENTD0010 | SV-51202r1_rule | DCHW-1 | Medium |
Description |
---|
Up-to-date documentation is essential in assisting with the management, auditing, and security of the network infrastructure used to support the test and development environment. Network diagrams are important because they show the overall layout where devices are physically located within the network infrastructure. Diagrams also show the relationship and connectivity between devices where possible intrusive attacks could take place. Having up-to-date network diagrams will also help show what the security, traffic, and physical impact of adding a system will be on the network. |
STIG | Date |
---|---|
Test and Development Zone B Security Technical Implementation Guide | 2018-09-17 |
Check Text ( C-46619r2_chk ) |
---|
Review the accreditation package documentation to verify the test and development environment is correctly documented within the network diagrams and site security plan. If the organization's accreditation package does not include the test and development infrastructure in the network diagrams and system security plan, this is a finding. |
Fix Text (F-44359r2_fix) |
---|
Document network infrastructure and systems supporting the test and development environment, then include it with the accreditation package. |