UCF STIG Viewer Logo

Virtual machines are removed from the site without approval documentation.


Finding ID Version Rule ID IA Controls Severity
V-15903 ESX1070 SV-16845r1_rule ECSC-1 Medium
From a theft perspective, virtual machines are easy to copy and move to a person’s USB drive, portable hard drive, etc. An insider could potentially move the organization’s entire data center on any type of removable media that had sufficient space.
VMware ESX 3 Policy 2016-05-03


Check Text ( C-16263r1_chk )
Request the approval documentation from the IAO/SA that the site uses for all virtual machines taken off site. If no documentation exists, this is a finding.
Fix Text (F-15864r1_fix)
Create documentation to use for virtual machines taken off site.