UCF STIG Viewer Logo

The Voice Video Session Manager must alert the ISSO and SA (at a minimum) in the event of a session (call) record system failure.


Overview

Finding ID Version Rule ID IA Controls Severity
V-206822 SRG-NET-000088-VVSM-00038 SV-206822r508661_rule Medium
Description
It is critical for the appropriate personnel to be aware if a system is at risk of failing to process session records. Without this notification, the security personnel may be unaware of an impending failure of the session record capability. Session record processing failures include software/hardware errors, failures in the capturing mechanisms, and storage capacity being reached or exceeded. This requirement applies to each session record data storage repository (i.e., distinct information system component where session records are stored), the centralized session record storage capacity of organizations (i.e., all session record data storage repositories combined), or both.
STIG Date
Voice Video Session Management Security Requirements Guide 2020-09-04

Details

Check Text ( C-7077r364655_chk )
Verify the Voice Video Session Manager alerts the ISSO and SA (at a minimum) in the event of a session record system failure.

If the Voice Video Session Manager does not alert the ISSO and SA (at a minimum) in the event of a session record system failure, this is a finding.
Fix Text (F-7077r364656_fix)
Configure the Voice Video Session Manager to alert the ISSO and SA (at a minimum) in the event of a session record system failure.