STIGQter: STIG Summary: Traditional Security Checklist Version: 1 Release: 3 Benchmark Date: 15 Jun 2020:

Protected Distribution System (PDS) Documentation - Signed Approval

DISA Rule

SV-41017r3_rule

Vulnerability Number

V-30974

Group Title

PDS Documentation - Signed Approval

Rule Version

CS-05.03.01

Severity

CAT III

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

1. The approval authority must be the system Authorizing Official (AO), cognizant security office for contractors or other Department or Agency designee having Approval Authority for the for the installation and operation of the PDS and

2. A documented approval of the PDS must be signed and dated by the current approval authority.

NOTE: In tactical environments mobile systems employing inter-shelter cabling need not be re-approved for each relocation if the relocation provides security comparable to that of the original approval. Otherwise, new approval must be obtained.

Check Contents

Validate that:

1. The approval authority is the system Authorizing Official (AO), cognizant security office for contractors or other Department or Agency designee having Approval Authority for the installation and operation of the PDS and

2. A documented approval of the PDS is signed and dated by the current approval authority.

NOTE: In tactical environments mobile systems employing inter-shelter cabling need not be re-approved for each relocation if the relocation provides security comparable to that of the original approval. Otherwise, new approval must be obtained.

Vulnerability Number

V-30974

Documentable

False

Rule Version

CS-05.03.01

Severity Override Guidance

Validate that:

1. The approval authority is the system Authorizing Official (AO), cognizant security office for contractors or other Department or Agency designee having Approval Authority for the installation and operation of the PDS and

2. A documented approval of the PDS is signed and dated by the current approval authority.

NOTE: In tactical environments mobile systems employing inter-shelter cabling need not be re-approved for each relocation if the relocation provides security comparable to that of the original approval. Otherwise, new approval must be obtained.

Check Content Reference

M

Target Key

2506

Comments