The desktop backgrounds of ISs attached to a KVM switch are not labeled with banners in accordance with this STIG.

From Keyboard, Video, Mouse Switch Security STIG

Part of KVM Desktop Backgrounds

Associated with IA controls: ECML-1

SV-6842r1_rule The desktop backgrounds of ISs attached to a KVM switch are not labeled with banners in accordance with this STIG.

Vulnerability discussion

Without the banners to identify the IS that the KVM switch is currently active on, the user could enter a command to the wrong IS and create a denial of service or the user could inter data into the wrong system creating either a security incident (data entered to a system of the wrong classification) or a compromise of sensitive data.The IAO or SA will ensure that the desktop backgrounds of ISs attached to a KVM switch are labeled with banners in accordance with this STIG.

Check content

The reviewer will view the desktop backgrounds of the ISs attached to the KVM switch and verify that they are labeled as required. The desktop backgrounds will display classification banners at the top and bottom of the screen. These banners will state the overall classification level of the IS in large bold type. These banners will have a solid background color assigned using the following scheme: Yellow for Special Compartmented Information (SCI). Orange for Tope Secret (TS). Red for Secret. Blue for Confidential. Green for Unclassified. When ISs have similar classification levels but require separation for other reasons, the use of unique colors for different ISs or networks is permissible. These banners will identify the IS if space is available

Fix text

Modify the screen backgrounds for each IS attached to the KVM switch to comply with the guidance given in the STIG.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.

Powered by sagemincer