UCF STIG Viewer Logo

Physical security of the Automated Information System (AIS) does not meet DISA requirements.


Overview

Finding ID Version Rule ID IA Controls Severity
V-1070 1.001 SV-29619r1_rule Medium
Description
Inadequate physical protection can undermine all other security precautions utilized to protect the system. This can jeopardize the confidentiality, availability, and integrity of the system. Physical security of the AIS is the first line protection of any system.
STIG Date
Windows 2008 Domain Controller Security Technical Implementation Guide 2019-06-18

Details

Check Text ( C-7883r1_chk )
Interview the SA to determine if equipment is located in an access controlled area.

Note: Servers will be located in rooms, or locked cabinets, that are accessible only to authorized systems personnel. Authorized user access should be verified at two points (i.e. building access and server room). User workstations containing sensitive data should be in access controlled areas.
Fix Text (F-31r1_fix)
Relocate equipment to a controlled access area.