Information Assurance - KVM Switch (Request for Approval ) Documentation is not Available

From Traditional Security

Part of Information Assurance - KVM Switch (Documentation)

Associated with IA controls: DCSP-1

SV-41267r2_rule Information Assurance - KVM Switch (Request for Approval ) Documentation is not Available

Vulnerability discussion

Failure to request approval for connection of new or additional KVM devices (switch boxes) for use in switching betwee SIPRNet devices and unclassified devices (NIPRNet) from the Classified Connection Approval Office (CCAO) could result in unapproved devices being used or approved devices being used or configured in an unapproved manner; therby increasing the risk for the DISN.

Check content

1. Check to ensure the Enclave/Local DAA submitted initial and updated (as required) Certification and Accreditation (C&A) documentation (IAW the DIACAP) to the CCAO/UCAO reflecting the addition of KVM devices on the user’s enclave. 2. SIPRNet users must also submit an updated SIPRNet Connection Questionnaire (SCQ) to the CCAO reflecting the device on the user’s enclave. TACTICAL ENVIRONMENT: The check is applicable where KVM devices are in use.

Fix text

1. The Enclave or local DAA must provide initial and updated (as required) Certification and Accreditation (C&A) documentation (IAW the DIACAP) to the CCAO/UCAO reflecting the addition of KVM devices on the user’s enclave. 2. If using KVM on SIPRNet an updated SIPRNet Connection Questionnaire (SCQ) must be submitted to the CCAO reflecting the devices on the user’s enclave.

Pro Tips

Powered by sagemincer