There is no user documentation describing the correct usage and users responsibilities for an A/B switch.

From Keyboard, Video, Mouse Switch Security STIG

Part of A/B switch SFUG

Associated with IA controls: PRRB-1

SV-6922r1_rule There is no user documentation describing the correct usage and users responsibilities for an A/B switch.

Vulnerability discussion

The Security Features Users Guide (SFUG) gives the users a single source to find security policy and guidance as to the users responsibility for security. The general policies and user responsibilities as apply to A/B switches and any local security policies will be placed in the SFUG or similar document.The IAO will maintain and distribute to the users a SFUG that describes the correct uses of the switch and the users responsibilities.

Check content

The reviewer will interview the IAO and view the SFUG or equivalent documentation to verify that the following points are discussed. 1. A/B switches should be used only if there is no other solution. 2. A/B switches should be used only to connect multiple peripheral devices to a single IS. 3. A/B switches should never be used to connect a single peripheral to multiple ISs. 4. If an A/B switch is used to connect or share peripheral devices between two or more ISs, the ISs should be intended for the use of a single user within the users work area, and be visible from all ISs that it is attached.

Fix text

Create a section in the sites SFUG that contains general security policies and guidance plus the site security policies and guidance for use of an A/B switch.

Pro Tips

Powered by sagemincer