The organization must document the Memorandum of Understanding (MOU) for the bidirectional enclave boundary protected with a single device between the local Voice Video system management network and the DISN Voice Services management network.

From Voice Video Policy Security Technical Implementation Guide

Part of SRG-POL-400019

Associated with: CCI-002073

VVSP-01-000046_rule The organization must document the Memorandum of Understanding (MOU) for the bidirectional enclave boundary protected with a single device between the local Voice Video system management network and the DISN Voice Services management network.

Vulnerability discussion

Organizations must carefully consider the risks that may be introduced when information systems (i.e., system interconnections) are connected to other systems with different security requirements and security controls, both within organizations and external to organizations. Authorizing Officials determine the risk associated with information system connections and the appropriate controls employed. Risk considerations also include information systems sharing the same networks.Voice Video system devices and circuit-switched telecom switches may be connected to multiple management networks. Several management networks may have connectivity through the local management VLAN or dedicated OOB management network. Managing or monitoring the Voice Video system devices under local management may require segmentation from other management networks. When networks are interconnected and both management networks have access to the same devices via a single management port, each of these management networks is a different enclave. The access and traffic between them must be filtered to protect each from compromise by another.

Check content

If the bidirectional enclave boundary is protected with a single device between the local Voice Video system management network and the DISN Voice Services management network, this is applicable. Review each Voice Video system security plan (SSP). Confirm the organization documents an MOU for the bidirectional enclave boundary protected with a single device (e.g., firewall) between the local Voice Video system management network and the DISN voice services management network. Verify the MOU stipulates the conditions of operation of the device: - Both parties must have agreed to and signed the MOU. - The owner implements configuration that protects the owner's network. - The owner implements configuration that protects the other's network as agreed to in the MOU. If the organization does not document the bidirectional enclave boundary protected with a single device between the local Voice Video system management network and the DISN Voice Services management network with an MOU, this is a finding.

Fix text

Document the MOU for the bidirectional enclave boundary protected with a single device between the local Voice Video system management network and the DISN Voice Services management network. The MOU must stipulate the conditions of operation of the device as follows: - Both parties must have agreed to and signed the MOU. - The owner implements configuration that protects the owner's network. - The owner implements configuration that protects the other's network as agreed to in the MOU.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.

Powered by sagemincer