UCF STIG Viewer Logo

USB devices are attached to a DoD IS without prior IAO approval.


Overview

Finding ID Version Rule ID IA Controls Severity
V-6766 USB01.002.00 SV-6988r1_rule DCBP-1 Medium
Description
The IAO needs to be aware of what type of USB devices are being attached to DoD ISs and needs to stop prohibited devices from being attached. By requiring the IAO to approve the USB devices the IAO will be informed. The IAO or SA will ensure that no USB device is attached to a DoD IS unless approved by the IAO.
STIG Date
VMware ESX 3 Server 2016-05-13

Details

Check Text ( C-2913r1_chk )
The reviewer will interview the IAO or SA to verify that prior approval by the IAO is required before USB devices are attached to DoD ISs and that this policy is disseminated to all users.
Fix Text (F-6419r1_fix)
The IAO will know that approval by the IAO is required before USB devices are attached to DoD ISs and the IAO will ensure that this policy is disseminated to all users.