The organization must have a current ISP GIG Waiver for any ISP connections to the test and development environment.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-39674	ENTD0350	SV-51541r1_rule		Low

Description
The test and development environment is typically a closed and physically separated network with no external connectivity to the DISN or Internet. In some instances, Internet connectivity is needed for this environment due to the flexibility it provides for nonoperational systems. In this case, an ISP GIG Waiver is required, along with approval from the organization's Authorizing Official.

STIG	Date
Test and Development Zone D Security Technical Implementation Guide	2018-09-17

Details

Check Text ( C-46829r1_chk )
Verify the organization has an ISP GIG Waiver for any Internet connection. The documentation should be up to date and included with the accreditation package. If no ISP GIG Waiver has been obtained or is not up to date, this is a finding.

Fix Text (F-44682r1_fix)
Obtain an ISP GIG Waiver for any Internet connection into the test and development environment.