Servers and other hosts are not compliant with applicable Operating System (OS) STIG requirements.

Part of Servers and hosts OS STIG Requirements

Associated with IA controls: DCCS-1, DCCS-2

SV-6742r1_rule Servers and other hosts are not compliant with applicable Operating System (OS) STIG requirements.

Vulnerability discussion

SAN servers and other hosts are hardware software combinations that actually run under the control of a native OS found on the component. This OS may be UNIX, LNIX, Windows, etc. The underlying OS must be configured to be compliant with the applicable STIG to ensure that they do not insert known vulnerabilities into the DOD network infrastructure.The IAO/NSO will ensure that servers and other hosts are compliant with applicable Operating System (OS) STIG requirements.

Check content

The reviewer will interview the IAO/NSO and view the VMS to verify that servers and other hosts are compliant with applicable Operating System (OS) STIG requirements.

Fix text

Perform a self assessment using the applicable OS checklists or scripts on any server or host in the SAN that has not been reviewer or request a formal review from FSO.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.