A/B switches connecting information systems of differing classification levels must be on the NIAP CCEVS Products Lists.

From Keyboard Video and Mouse Switch STIG

Part of A/B Switch ISs of different classification

Associated with IA controls: DCBP-1

SV-6981r3_rule A/B switches connecting information systems of differing classification levels must be on the NIAP CCEVS Products Lists.

Vulnerability discussion

An A/B switch not found on the approved KVM and A/B switch lists has not been tested to verify that it does not leak data between systems. This can lead to the compromise of sensitive data or the compromise of the ISs attached to the A/B switch.The organization will ensure only approved A/B switches are used with ISs of differing classification levels.

Check content

The reviewer will verify the A/B switch attached to ISs of different classification levels exist on the NIAP CCEVS Products Lists. https://www.niap-ccevs.org/CCEVS_Products/ If the A/B switch is not on the NIAP CCEVS Products Lists, this is a finding.

Fix text

Replace the A/B switch with one from the NIAP CCEVS Products Lists. https://www.niap-ccevs.org/CCEVS_Products/

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.

Powered by sagemincer