The organization must document and implement the DISN Voice Precedence for mission-critical communications processes with consideration for Voice Video system security and the resulting risk to organizational operations, organizational assets, individuals, other organizations, and the Nation.

From Voice Video Policy Security Technical Implementation Guide

Part of SRG-POL-300639

Associated with: CCI-000235

VVSP-01-000190_rule The organization must document and implement the DISN Voice Precedence for mission-critical communications processes with consideration for Voice Video system security and the resulting risk to organizational operations, organizational assets, individuals, other organizations, and the Nation.

Vulnerability discussion

Information protection needs are technology-independent, required capabilities to counter threats to organizations, individuals, or the Nation through the compromise of information (i.e., loss of confidentiality, integrity, or availability). Information protection needs are derived from the mission/business needs defined by the organization, the mission/business processes selected to meet the stated needs, and the organizational risk management strategy. Information protection needs determine the required security controls for the organization and the associated information systems supporting the mission/business processes.Inherent in defining an organizations information protection needs is an understanding of the level of adverse impact that could result if a compromise of information occurs. The security categorization process is used to make such potential impact determinations. Mission/business process definitions and associated information protection requirements are documented by the organization in accordance with organizational policy and procedure.One of the primary missions of Voice Video systems is the DISN Voice Precedence for mission-critical decision-maker communications, especially during times of crisis. A primary business function includes fire and emergency services (FES) processes. These, along with other mission/business functions, must be documented in the System Security Plan (SSP).

Check content

Review the organizational Voice Video SSP for each system. Verify locations supporting mission-critical decision-maker communications meet the DISN Voice Precedence services. These users require hardened network infrastructure and support, assured services, and high availability to meet organizational obligations and responsibilities. DISN Voice Precedence user categories: - Flash/Flash Override: Highest level of assured service; requires 99.999 percent uptime with 8 hours uninterruptible power supply (UPS) - Immediate/Priority: Second-highest level of assured service; requires 99.997 percent uptime with two hours of UPS - Routine: Lowest level of assured service; requires 99.9 percent uptime with optional UPS - Non-Mission Critical: Does not require assured service; may be denied features or capabilities during times of crisis The DISN Voice Precedence affects the Voice Video system architecture, network planning/implementation, continuity of operations, Voice Video access control, user training, and facility considerations. Each of these areas is addressed in specific requirements. This requirement addresses the overall program management of this specific mission/business process implementation. If the organization does not document and implement the DISN Voice Precedence for mission-critical communications processes with consideration for Voice Video system security and the resulting risk, this is a finding.

Fix text

Document and implement the organizational Voice Video system to support mission-critical decision-maker communications through the DISN Voice Precedence service. The users of this service require hardened network infrastructure and support, assured services, and high availability to meet organizational obligations and responsibilities. The DISN Voice Precedence service is addressed in the CJCSI 6211.02D, DoDI 8100.04, and the current Unified Capabilities Requirements (UCR) documents.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.

Powered by sagemincer