UCF STIG Viewer Logo

Protected Distribution System (PDS) Monitoring - Initial Inspection


Overview

Finding ID Version Rule ID IA Controls Severity
V-30978 CS-06.03.02 SV-41022r2_rule DCSR-3 ECCT-2 PESS-1 Low
Description
A PDS that is not inspected, monitored and maintained as required could result in undetected access, sabotage or tampering of the unencrypted transmission lines. This could directly lead to the loss or compromise of classified.
STIG Date
Traditional Security 2013-07-11

Details

Check Text ( C-39641r3_chk )
Check to ensure the PDS was inspected prior to initial operation. Documentation of the inspection and results should be available for review. This meets the following requirement from the NSTISSI 7003: "The Approval Authority shall ensure the PDS are inspected prior to initial operation."

NOTES:
1. This check is applicable in a tactical environment if the PDS is located within a fixed facility. It is not applicable to field/mobile PDS.

2. In the reviewer notes be sure to provide the date of the initial inspection, name of inspector and general description of results.
Fix Text (F-34789r3_fix)
Following is a reiteration of the requirement: The PDS must be inspected prior to initial operation. Documentation of the inspection and results must be available for review. This meets the following requirement from the NSTISSI 7003: "The Approval Authority shall ensure the PDS are inspected prior to initial operation."

Obviously an initial inspection cannot ever be conducted once it is not completed. Therefore the fix for this finding is to send a written request to the PDS approval authority asking for an "initial" inspection of the PDS by an individual appointed by the approval authority. If the approval authority concurs to conduct the inspection then this finding can be closed once the inspection is actually completed and any results form that inspection are closed. If the reply from the approval authority indicates they will not complete their "required" inspection then then finding can be closed and the reply from the approval authority should be maintained for future reference.