Video Teleconferencing system components must display the Standard Mandatory DoD Notice and Consent Banner exactly as specified prior to logon or initial access.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-17706	RTS-VTC 3420.00	SV-18880r3_rule		Low

Description
The operating system and remotely accessed information systems are required to display the DoD-approved system use notification message or banner before granting access to the system that provides privacy and security notices consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance. This ensures the legal requirements for auditing and monitoring are met. System use notification messages must be displayed when individuals log on to the information system. The approved DoD text must be used as specified in the DoD Instruction 8500.01 dated March 14, 2014.

Description

The operating system and remotely accessed information systems are required to display the DoD-approved system use notification message or banner before granting access to the system that provides privacy and security notices consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance. This ensures the legal requirements for auditing and monitoring are met. System use notification messages must be displayed when individuals log on to the information system. The approved DoD text must be used as specified in the DoD Instruction 8500.01 dated March 14, 2014.

STIG	Date
Video Services Policy STIG	2020-02-25

Details

Check Text ( C-18976r3_chk )
Interview the IAO to validate compliance with the following requirement: Verify all video teleconferencing system components display the Standard Mandatory DoD Notice and Consent Banner prior to logon or initial access. If the displayed text is not exactly as specified in the DoD Instruction 8500.01 dated March 14, 2014, this is a finding. The text is posted on the IASE website: https://dl.cyber.mil/hidden/home/unclass-consent_banner.zip

Check Text ( C-18976r3_chk )

Interview the IAO to validate compliance with the following requirement:

Verify all video teleconferencing system components display the Standard Mandatory DoD Notice and Consent Banner prior to logon or initial access. If the displayed text is not exactly as specified in the DoD Instruction 8500.01 dated March 14, 2014, this is a finding.

The text is posted on the IASE website:
https://dl.cyber.mil/hidden/home/unclass-consent_banner.zip

Fix Text (F-17603r2_fix)
Configure all video teleconferencing system components to display the Standard Mandatory DoD Notice and Consent Banner prior to logon or initial access.