UCF STIG Viewer Logo

The organization must create a policy and procedures document for proper handling and transport of data entering (physically or electronically) the test and development environment.


Overview

Finding ID Version Rule ID IA Controls Severity
V-43317 ENTD0370 SV-56070r1_rule Medium
Description
Without policies and procedures in place, the organization will not have the authority to hold personnel accountable for improperly handling or transporting data into the test and development environment. The documents need to include guidance for both physical and electronic data migration.
STIG Date
Test and Development Zone B Security Technical Implementation Guide 2018-09-17

Details

Check Text ( C-49290r2_chk )
Review the organization's policies and procedures document to ensure proper handling of data being transported into the test and development environment. This document must include information for physical and electronic migration of data.

If the organization does not have a policy and procedures document created or available for review, this is a finding.
Fix Text (F-48944r1_fix)
Create a policy for, and document the procedure of, proper handling of data transported into the test and development environment. This document must include information for physical and electronic handling and migration of data.