Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-31262 | FN-05.03.01 | SV-41496r2_rule | ECAN-1 PECF-1 PECF-2 PEVC-1 PRAS-1 PRAS-2 PRNK-1 | Low |
Description |
---|
Failure to provide proper oversight of Foreign National partners or employees and limit access to classified and sensitive information can result in the loss or compromise of NOFORN information. |
STIG | Date |
---|---|
Traditional Security | 2013-07-11 |
Check Text ( C-39977r4_chk ) |
---|
Check to ensure there is a Foreign Disclosure Officer (FDO) available or minimally that a Foreign Contact Officer has been appointed to control the activities of foreign visitors, REL Officers, FLO, and exchange personnel. Check that there is a formal Appointment Letter. TACTICAL ENVIRONMENT: This check is applicable where REL partners/LN/FN are employed in a tactical environment with access to US Systems. |
Fix Text (F-35149r4_fix) |
---|
1. A Foreign Disclosure Officer (FDO) must be available or minimally a Foreign Contact Officer must be appointed to control the activities of foreign visitors, REL Officers, FLO, and exchange personnel. 2. A formal Appointment Letter for these duties that outlines responsibilities, etc. must be on-hand. |