Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-32477 | PE-08.02.02 | SV-42814r2_rule | PEPF-1 PEPF-2 PRMP-1 PRMP-2 PRNK-1 | Medium |
Description |
---|
Failure to subject personnel who install and maintain the IDS alarms to a trustworthiness determination can result in the inadvertent or deliberate unauthorized release of classified material. |
STIG | Date |
---|---|
Traditional Security | 2013-07-11 |
Check Text ( C-40917r1_chk ) |
---|
Check physical IDS - protecting vaults, secure rooms or spaces containing SIPRNet assets - to ensure that installation and maintenance is accomplished by U.S. citizens who have been subjected to a trustworthiness determination in accordance with DoD 5200.2-R. Minimally they must be subjects of a successfully adjudicated National Agency Check (NAC). TACTICAL ENVIRONMENT APPLICABILITY: Apply to fixed tactical environments where IDS is installed to protect SIPRNet and other DISN connected assets. |
Fix Text (F-36394r1_fix) |
---|
Ensure that installation and maintenance of physical IDS - protecting vaults, secure rooms or spaces containing SIPRNet assets - is accomplished by U.S. citizens who have been subjected to a trustworthiness determination in accordance with DoD 5200.2-R. Minimally they must be subjects of a successfully adjudicated National Agency Check (NAC). |