SAN devices are not added to the site System Security Authorization Agreement (SSAA).

Part of SAN devices not added to the site SSAA

Associated with IA controls: DCID-1

SV-6729r2_rule SAN devices are not added to the site System Security Authorization Agreement (SSAA).

Vulnerability discussion

All hardware and software will be entered into the SSAA. This gives a central location where it can be shown that all interested parties have reviewed the impact on their security posture and approved the implementation of the SAN.The IAO/NSO will ensure that SAN devices are added to the site System Security Authorization Agreement (SSAA).

Check content

The reviewer will interview the IAO/NSO to validate that SAN devices are added to the site System Security Authorization Agreement (SSAA).

Fix text

Update the SSAA following the SSAA review and acceptance procedures to include the SAN.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.