Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-32132 | IS-13.02.01 | SV-42449r2_rule | PECS-1 PECS-2 PEDD-1 PESP-1 | Medium |
Description |
---|
Failure to develop emergency procedures can lead to the loss or compromise of classified or sensitive information. |
STIG | Date |
---|---|
Traditional Security | 2013-07-11 |
Check Text ( C-40662r4_chk ) |
---|
General Requirement: Plans shall be developed to protect, remove, or destroy classified material in case of fire, natural disaster, civil disturbance, terrorist activities, or enemy action, to minimize the risk of compromise, and for the recovery of classified information, if necessary, following such events. Checks: Check #1. Check to ensure there is local site documentation for the emergency, protection, removal, and destruction of classified material and equipment. (CAT II) Check #2. Also check to ensure that these instructions are readily available to the employee population. Such plans should be posted on or near safes, exits to vaults and secure rooms or at any location where classified materials are stored. (CAT III) TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments where procedural documents (SOPs) should be in place. Not applicable to a field/mobile environment. |
Fix Text (F-36073r2_fix) |
---|
General Requirement: Plans shall be developed to protect, remove, or destroy classified material in case of fire, natural disaster, civil disturbance, terrorist activities, or enemy action, to minimize the risk of compromise, and for the recovery of classified information, if necessary, following such events. Ensure there is local site documentation for the emergency, protection, removal, and destruction of classified material and equipment. Also ensure that these instructions are readily available to the employee population. Such plans should be posted on or near safes, exits to vaults and secure rooms or at any location where classified materials are stored. |