There is no document instructing users that USB devices be powered off for at least 60 seconds prior to being connected to an IS.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-6764	USB00.001.00	SV-6986r1_rule		Low

Description
Because USB devices that contain only volatile memory are designed to withstand minor fluctuations in power they contain some means of maintaining memory for short power interruptions. Users need to ensure that USB devices remain without power for at least 60 seconds when disconnecting them from one IS, and connecting to a different IS to make sure enough time passes for all power to dissipate and the memory erased. The IAO will ensure that the SFUG or an equivalent document requires that all USB devices be powered off for at least 60 seconds prior to being connected to an IS.

Description

Because USB devices that contain only volatile memory are designed to withstand minor fluctuations in power they contain some means of maintaining memory for short power interruptions. Users need to ensure that USB devices remain without power for at least 60 seconds when disconnecting them from one IS, and connecting to a different IS to make sure enough time passes for all power to dissipate and the memory erased. The IAO will ensure that the SFUG or an equivalent document requires that all USB devices be powered off for at least 60 seconds prior to being connected to an IS.

STIG	Date
VMware ESX 3 Server	2016-05-13

Details

Check Text ( C-2911r1_chk )
The reviewer will interview the IAO and view the SFUG, or equivalent documentation, to verify that it is documented that users should remove all power from a USB device when it is moved from one IS to another for at least 60 seconds to allow all power to dissipate and the memory to erase.

Fix Text (F-6417r1_fix)
Update the SFUG, or an equivalent document, to include this information.