The organization must develop and document procedures to facilitate the implementation of the Voice Video access control policy and associated access controls.

From Voice Video Policy Security Technical Implementation Guide

Associated with: CCI-000004

VVSP-01-000003_rule The organization must develop and document procedures to facilitate the implementation of the Voice Video access control policy and associated access controls.

Vulnerability discussion

The Voice Video access control procedures implement the access control policy. Organizational procedures must reflect applicable NIST and STIG guidance by determining applicable STIGs and SRGs and identify the applicable access controls and procedures.Developing and documenting implementation procedures for the Voice Video access control policy and associated controls addressing dial plans, session control, and remote access reduces the risk caused by use of outdated or compromised access control techniques.

Check content

Review the developed and documented procedures to facilitate the implementation of the organization-specific Voice Video access control policy and associated access controls. These procedures must address the Voice Video access control policy dial plans, session control, remote access, and other included policies. If procedures have not been developed and documented that facilitate the implementation of organization-specific Voice Video access control policy and associated access controls, this is a finding.

Fix text

Develop and document procedures to facilitate the implementation of the organization-specific Voice Video access control policy and associated access controls. These procedures must address the Voice Video access control policy dial plans, session control, remote access, and other included policies.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.