Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Physical security of the Automated Information System (AIS) does not meet DISA requirements.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-1070 | 1.001 | SV-29618r1_rule | PECF-1 | Medium |
| Description |
|---|
| Inadequate physical protection can undermine all other security precautions utilized to protect the system. This can jeopardize the confidentiality, availability, and integrity of the system. Physical security of the AIS is the first line protection of any system. |
| STIG | Date |
|---|---|
| Windows Vista Security Technical Implementation Guide | 2012-07-02 |
Details
| Check Text ( C-7883r1_chk ) |
|---|
| Interview the SA to determine if equipment is located in an access controlled area. Note: Servers will be located in rooms, or locked cabinets, that are accessible only to authorized systems personnel. Authorized user access should be verified at two points (i.e. building access and server room). User workstations containing sensitive data should be in access controlled areas. |
| Fix Text (F-31r1_fix) |
|---|
| Relocate equipment to a controlled access area. |