The organization must create a policy and procedures document for proper handling and transport of data entering (physically or electronically) the test and development environment.

From Test and Development Zone A Security Technical Implementation Guide

Part of ENTD0370 - Policy and procedures document not created for proper data handling.

SV-56070r1_rule The organization must create a policy and procedures document for proper handling and transport of data entering (physically or electronically) the test and development environment.

Vulnerability discussion

Without policies and procedures in place, the organization will not have the authority to hold personnel accountable for improperly handling or transporting data into the test and development environment. The documents need to include guidance for both physical and electronic data migration.

Check content

Review the organization's policies and procedures document to ensure proper handling of data being transported into the test and development environment. This document must include information for physical and electronic migration of data. If the organization does not have a policy and procedures document created or available for review, this is a finding.

Fix text

Create a policy for, and document the procedure of, proper handling of data transported into the test and development environment. This document must include information for physical and electronic handling and migration of data.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.