UCF STIG Viewer Logo

No policy exists to assign virtual machines to personnel.


Overview

Finding ID Version Rule ID IA Controls Severity
V-15891 ESX0950 SV-16832r1_rule ECSC-1 Low
Description
In traditional computing environments, servers were usually assigned to various personnel for administration. For instance, the data server is administered by the database administrator; the domain controller is maintained by the network administrator, etc. Other methods include assigning the MAC address to specific personnel or identifying machines by Ethernet location or port number. All these approaches are impractical in the virtual machine environment. In the virtual environment, virtual machines may be moved or have MAC addresses that may change. These scenarios make it difficult to establish who owns the virtual machine running on a particular host. Therefore, a policy will need to be implemented to identify and assign virtual machines to the appropriate personnel.
STIG Date
VMware ESX 3 Policy 2016-05-03

Details

Check Text ( C-16250r1_chk )
Request a copy of the policy that is used to assign virtual machines to personnel. If no policy or procedure exists, this is a finding.
Fix Text (F-15851r1_fix)
Develop a policy for assigning virtual machines to the appropriate personnel.