An ISDN-based or IP-based VTC system supporting conferences on multiple networks having different classification levels must utilize approved automatically controlled signage to indicate the secure/non-secure status or classification level of the conference/session. Such signage will be placed within the conference room and outside each entrance.

From Video Services Policy STIG

Part of RTS-VTC 7340 [IP] [ISDN]

Associated with IA controls: PEPF-1

SV-55769r1_rule An ISDN-based or IP-based VTC system supporting conferences on multiple networks having different classification levels must utilize approved automatically controlled signage to indicate the secure/non-secure status or classification level of the conference/session. Such signage will be placed within the conference room and outside each entrance.

Vulnerability discussion

VTC system users within the room must be informed when the system is actively engaged in a classified session and the classification level of that session if multiple classification levels are supported by the system. This will inform the participants regarding the information they may discuss during the session, thus preventing information having higher classification being discussed in a session having a lower classification level. Additionally, persons entering a room where classified VTC sessions occur must be informed of the status and classification level of the session so that persons without the appropriate clearance level for the information being discussed/presented do not enter the room. Both situations can lead to improper disclosure of classified information.System signage must minimally reflect secure/non-secure status of the system. The signage in IP-based systems connected to multiple classified networks must additionally reflect the classification of the network to which the system is connected. Signage must be controlled by the A/B, A/B/C, or A/B/C/D switch position.

Check content

Inspect the room where conferences take place to observe sign placement and that they accurately reflect the secure/non-secure status or classification of the network to which the system is connected. This will require a demonstration of the capability. If the signage is not posted or it does not accurately reflect the secure/non-secure status or classification of the network to which the system is connected, this is a finding.

Fix text

Obtain and implement approved automatically controlled signage that indicates the secure/non-secure status or classification level of the conference/session. Install signs so they are clearly visible within the room and at the entranceways.

Pro Tips

Powered by sagemincer