Network infrastructure and systems supporting the test and development environment must be documented within the organizations accreditation package.

From Test and Development Zone B Security Technical Implementation Guide

Part of ENTD0010 - The test and development infrastructure is not properly documented.

Associated with IA controls: DCHW-1

SV-51202r1_rule Network infrastructure and systems supporting the test and development environment must be documented within the organizations accreditation package.

Vulnerability discussion

Up-to-date documentation is essential in assisting with the management, auditing, and security of the network infrastructure used to support the test and development environment. Network diagrams are important because they show the overall layout where devices are physically located within the network infrastructure. Diagrams also show the relationship and connectivity between devices where possible intrusive attacks could take place. Having up-to-date network diagrams will also help show what the security, traffic, and physical impact of adding a system will be on the network.

Check content

Review the accreditation package documentation to verify the test and development environment is correctly documented within the network diagrams and site security plan. If the organization's accreditation package does not include the test and development infrastructure in the network diagrams and system security plan, this is a finding.

Fix text

Document network infrastructure and systems supporting the test and development environment, then include it with the accreditation package.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.