STIGQter STIGQter: STIG Summary: Voice Video Services Policy Security Technical Implementation Guide Version: 3 Release: 17 Benchmark Date: 25 Oct 2019:

Local commercial phone service must be provided in support of Continuity Of Operations (COOP) and Fire and Emergency Services (FES) communications.

DISA Rule

SV-21734r3_rule

Vulnerability Number

V-19593

Group Title

VVoIP 1225

Rule Version

VVoIP 1225

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Implement local commercial phone service (analog or TDM) according to the size of the site and the following:

Ensure local analog or TDM commercial phone service supports COOP and FES calls. This applies to TDM or VVoIP systems conditionally as follows:
- Connect local commercial service to the site’s local phone system/switch (TDM or VVoIP) and program access to the local service from all Voice Video Endpoints.
- Connect local commercial service to dedicated Voice Video Endpoints (separate from the site’s local phone system) throughout the facility and accessible in all work areas. These dedicated Voice Video Endpoints may be stand alone or part of a dedicated a key system, PBX, or VVoIP network separate from the site’s local VVoIP or TDM phone system.
- Sites may use mobile devices for COOP and FES calls in support of non-sensitive unclassified areas.

Check Contents

If the system does not support a minimum of 96 instruments, this is Not Applicable.

If the site is in a tactical war zone where “friendly” service is not available, this is Not Applicable.

Interview the ISSO to verify the site has local analog or TDM commercial phone service provided to support COOP and FES calls. The two most common methods to implement TDM or VVoIP systems are as follows:
- Connect local commercial service to the site’s local phone system/switch (TDM or VVoIP) and program access to the local service from all Voice Video Endpoints.
- Connect local commercial service to dedicated Voice Video Endpoints (separate from the site’s local phone system) throughout the facility and accessible in all work areas. These dedicated Voice Video Endpoints may be stand alone or part of a dedicated a key system, PBX, or VVoIP network separate from the site’s local VVoIP or TDM phone system.
- Sites may use mobile devices for COOP and FES calls in support of non-sensitive unclassified areas.
Note: The IA premise of this requirement is “availability” and COOP. The purpose of this requirement is to provide local commercial service in the event the site is cut off from DISN service or the main site to which the local site is subtended and tethered.

If the site does not have local analog or TDM commercial phone service provided to support COOP and FES calls, this is a finding.

If the local commercial service is VoIP or VVoIP, this is a finding.

Vulnerability Number

V-19593

Documentable

False

Rule Version

VVoIP 1225

Severity Override Guidance

If the system does not support a minimum of 96 instruments, this is Not Applicable.

If the site is in a tactical war zone where “friendly” service is not available, this is Not Applicable.

Interview the ISSO to verify the site has local analog or TDM commercial phone service provided to support COOP and FES calls. The two most common methods to implement TDM or VVoIP systems are as follows:
- Connect local commercial service to the site’s local phone system/switch (TDM or VVoIP) and program access to the local service from all Voice Video Endpoints.
- Connect local commercial service to dedicated Voice Video Endpoints (separate from the site’s local phone system) throughout the facility and accessible in all work areas. These dedicated Voice Video Endpoints may be stand alone or part of a dedicated a key system, PBX, or VVoIP network separate from the site’s local VVoIP or TDM phone system.
- Sites may use mobile devices for COOP and FES calls in support of non-sensitive unclassified areas.
Note: The IA premise of this requirement is “availability” and COOP. The purpose of this requirement is to provide local commercial service in the event the site is cut off from DISN service or the main site to which the local site is subtended and tethered.

If the site does not have local analog or TDM commercial phone service provided to support COOP and FES calls, this is a finding.

If the local commercial service is VoIP or VVoIP, this is a finding.

Check Content Reference

M

Target Key

594

Comments