Information Assurance - Unauthorized Wireless Devices - No Formal Policy and/or Warning Signs

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-31129	IA-11.03.01	SV-41280r2_rule	ECWN-1	Low

Description
Not having a wireless policy and/or warning signs at entrances could result in the unauthorized introduction of wireless devices into classified processing areas.

STIG	Date
Traditional Security	2013-07-11

Details

Check Text ( C-39827r2_chk )
1. Check to ensure there is a local wireless policy or SOP. 2. During the walk-around, ensure there is appropriate signage at entrances notifying employees and visitors that wireless devices are not authorized in a classified facility. TACTICAL ENVIRONMENT: The check is applicable to tactical locations where fixed facilities are used for classified processing. Not applicable to mobile/field environments.

Check Text ( C-39827r2_chk )

1. Check to ensure there is a local wireless policy or SOP.

2. During the walk-around, ensure there is appropriate signage at entrances notifying employees and visitors that wireless devices are not authorized in a classified facility.

TACTICAL ENVIRONMENT: The check is applicable to tactical locations where fixed facilities are used for classified processing. Not applicable to mobile/field environments.

Fix Text (F-35025r2_fix)
1. A local wireless policy or SOP must be written and available for employee reference. 2. There must be appropriate signage at entrances notifying employees and visitors that wireless devices are not authorized in a classified facility. 3. Wireless policy must be included in initial briefings for new employees and reinforced periodically such as during annual security refresher training.