The organization must document and implement the fire and emergency services (FES) processes with consideration for Voice Video system security and the resulting risk to organizational operations, organizational assets, individuals, other organizations, and the Nation.

From Voice Video Policy Security Technical Implementation Guide

Part of SRG-POL-300639

Associated with: CCI-000235

VVSP-01-000191_rule The organization must document and implement the fire and emergency services (FES) processes with consideration for Voice Video system security and the resulting risk to organizational operations, organizational assets, individuals, other organizations, and the Nation.

Vulnerability discussion

Information protection needs are technology-independent, required capabilities to counter threats to organizations, individuals, or the Nation through the compromise of information (i.e., loss of confidentiality, integrity, or availability). Information protection needs are derived from the mission/business needs defined by the organization, the mission/business processes selected to meet the stated needs, and the organizational risk management strategy. Information protection needs determine the required security controls for the organization and the associated information systems supporting the mission/business processes.Inherent in defining an organizations information protection needs is an understanding of the level of adverse impact that could result if a compromise of information occurs. The security categorization process is used to make such potential impact determinations. Mission/business process definitions and associated information protection requirements are documented by the organization in accordance with organizational policy and procedure.One of the primary missions of Voice Video systems is the DISN Voice Precedence for mission-critical decision-maker communications, especially during times of crisis. A primary business function includes FES processes. These, along with other mission/business functions, must be documented in the System Security Plan (SSP).

Check content

Review the organizational Voice Video SSP for each system. Verify that all locations support the FES processes as follows: - The location implements support for FES through local policies, procedures, staffing, and facilities or agreements/contracts with external providers. - The location's primary voice communication system supports enhanced FES emergency communications. - The location's primary voice communication system provides Automatic Number Identification (ANI) information. - The location's primary voice communication system provides Private Switch/Automatic Location Identification (PS/ALI) information. - The location maintains and keeps current the PS/ALI database with all telephone adds, moves, and changes. Implementing FES affects the Voice Video system architecture, network planning/implementation, continuity of operations, Voice Video access control, user training, and facility considerations. Each of these areas is addressed in specific requirements. This requirement addresses the overall program management of this specific mission/business process implementation. If the organization does not document and implement FES processes with consideration for Voice Video system security and the resulting risk, this is a finding.

Fix text

Document and implement the organizational Voice Video system to support FES at all locations. Ensure all locations support the FES processes as follows: - The location implements support for FES through local policies, procedures, staffing, and facilities or agreements/contracts with external providers. - The location's primary voice communication system supports enhanced FES emergency communications. - The location's primary voice communication system provides ANI information. - The location's primary voice communication system provides PS/ALI information. - The location maintains and keeps current the PS/ALI database with all telephone adds, moves, and changes. The FES is addressed in the DODI 6055.06 and the current Unified Capabilities Requirements (UCR) documents.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.

Powered by sagemincer