UCF STIG Viewer Logo

The Voice Video Session Manager must alert the ISSO and SA (at a minimum) in the event of a session (call) record system failure.


Overview

Finding ID Version Rule ID IA Controls Severity
V-62079 SRG-NET-000088-VVSM-00038 SV-76569r1_rule Medium
Description
It is critical for the appropriate personnel to be aware if a system is at risk of failing to process session records. Without this notification, the security personnel may be unaware of an impending failure of the session record capability. Session record processing failures include software/hardware errors, failures in the capturing mechanisms, and storage capacity being reached or exceeded. This requirement applies to each session record data storage repository (i.e., distinct information system component where session records are stored), the centralized session record storage capacity of organizations (i.e., all session record data storage repositories combined), or both.
STIG Date
Voice Video Session Management Security Requirements Guide 2017-12-28

Details

Check Text ( C-62883r1_chk )
Verify the Voice Video Session Manager alerts the ISSO and SA (at a minimum) in the event of a session record system failure.

If the Voice Video Session Manager does not alert the ISSO and SA (at a minimum) in the event of a session record system failure, this is a finding.
Fix Text (F-67999r1_fix)
Configure the Voice Video Session Manager to alert the ISSO and SA (at a minimum) in the event of a session record system failure.