All network infrastructure devices must be located in a secure room with limited access.

From Network Infrastructure Policy Security Technical Implementation Guide

Part of Network devices are not stored in secure Comm room

Associated with: CCI-000921

SV-8540r3_rule All network infrastructure devices must be located in a secure room with limited access.

Vulnerability discussion

If all communications devices are not installed within controlled access areas, risk of unauthorized access and equipment failure exists, which could result in denial of service or security compromise. It is not sufficient to limit access to only the outside world or non-site personnel. Not everyone within the site has the need-to-know or the need-for-access to communication devices.

Check content

Inspect the site to validate physical network components are in a secure environment with limited access. If there are any network components not located in a secure environment, this is a finding.

Fix text

Move all critical communications into controlled access areas. Controlled access area in this case means controlled restriction to authorize site personnel, i.e., dedicated communications rooms or locked cabinets. This is an area afforded entry control at a security level commensurate with the operational requirement. This protection will be sufficient to protect the network from unauthorized personnel. The keys to the locked cabinets and dedicated communications rooms will be controlled and only provided to authorized network/network security individuals.

Pro Tips

Powered by sagemincer