Title

Network infrastructure and systems supporting the test and development environment must be registered in a DoD asset management system. (Cat II impact)

Discussion

An asset management system is used to send out notifications on vulnerabilities in commercial and military information infrastructures as they are discovered. If the organization's assets are not registered with an asset management system, administrators will not be notified of important vulnerabilities such as viruses, denial of service attacks, system weaknesses, back doors, and other potentially harmful situations. Additionally, there will be no way to enter, track, or resolve findings during a review.

Check Content

Determine whether all systems and network infrastructure devices supporting the test and development environment are registered in an asset management system. If any systems and network infrastructure devices supporting the test and development environment are not registered in an asset management system, this is a finding.

Fix Text

Register the network infrastructure and systems supporting the test and development environment in a DoD asset management program.

Additional Identifiers

Rule ID: SV-51291r1_rule

Vulnerability ID: V-39433

Group Title: ENTD0030 - The test and development infrastructure registered in DoD asset management program.

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.