The Sun Ray system is not under direct control of a site Configuration Control Board.

Part of Sun Ray system not in control of site CCB

Associated with IA controls: DCCB-1

SV-17413r1_rule The Sun Ray system is not under direct control of a site Configuration Control Board.

Vulnerability discussion

Security integrity of the system and the ability to back-up and recover from failures cannot be maintained without the control of the system configuration. Unless the configuration is controlled by an independent board it is much less likely to be in its approved accredited state.

Check content

Ask to see the documented configuration management process for Sun Ray system. Ensure that the plan includes a site Configuration Control Board (CCB). If a plan that includes a CCB exists, this is not a finding. If a plan exists but does not include a CCB or there is not a plan, this is a finding.

Fix text

Implement a configuration management process for the Sun Ray system.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.