Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-16108 | VVoIP 1130 | SV-17096r2_rule | DCBP-1 ECSC-1 | Medium |
Description |
---|
It is important that UC soft clients be tested and subsequently certified and accredited for IA purposes, to include upgrades or patches. Applications that have not been sufficiently vetted may introduce malware to the network or have security issues an adversary may manipulate. |
STIG | Date |
---|---|
Voice / Video Services Policy STIG | 2015-07-01 |
Check Text ( C-17221r2_chk ) |
---|
Review the site documentation to confirm the UC soft client patches and upgrades are tested and approved prior to implementation. If the UC soft client patches and upgrades are not tested and approved prior to implementation, this is a finding. |
Fix Text (F-16214r2_fix) |
---|
Ensure UC soft client patches and upgrades are tested and approved prior to implementation. |