Persistent memory USB devices are not labeled in accordance with the classification level of the data they contain.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-6771 | USB01.006.00 | SV-6993r1_rule | Medium |
| Description |
|---|
| If the persistent memory USB device is not labeled with the appropriate classification level this can lead to the compromise of sensitive data or the compromise of an IS that the device is attached. |
| STIG | Date |
|---|---|
| VMware ESX 3 Server | 2016-05-13 |
Details
| Check Text ( C-2921r1_chk ) |
|---|
| The reviewer will interview the IAO or SA to verify that the labeling of persistent memory USB devices is in accordance with the classification level of the data they contain. |
| Fix Text (F-6424r1_fix) |
|---|
| Label persistent memory USB devices in accordance with the classification level of the data they contain. Disseminate this policy to all users. |