Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-6766 | USB01.002.00 | SV-6988r1_rule | DCBP-1 | Medium |
Description |
---|
The IAO needs to be aware of what type of USB devices are being attached to DoD ISs and needs to stop prohibited devices from being attached. By requiring the IAO to approve the USB devices the IAO will be informed. The IAO or SA will ensure that no USB device is attached to a DoD IS unless approved by the IAO. |
STIG | Date |
---|---|
VMware ESX 3 Server | 2016-05-13 |
Check Text ( C-2913r1_chk ) |
---|
The reviewer will interview the IAO or SA to verify that prior approval by the IAO is required before USB devices are attached to DoD ISs and that this policy is disseminated to all users. |
Fix Text (F-6419r1_fix) |
---|
The IAO will know that approval by the IAO is required before USB devices are attached to DoD ISs and the IAO will ensure that this policy is disseminated to all users. |