Title

The organization must prohibit remote access from external networks to the test and development environment. (Cat III impact)

Discussion

Because the test and development environment is a closed network, any network or remote access from outside the designated environment boundaries is prohibited. Allowing remote access from an untrusted external network will leave the network open to attacks and compromised.

Check Content

Verify the organization's policies and procedures to prohibit remote access to the test and development environment from external networks. If policies and procedures are not available to prohibit remote access to the test and development environment from external networks, this is a finding.

Fix Text

Prohibit remote access to the test and development environment from external networks.

Additional Identifiers

Rule ID: SV-51535r1_rule

Vulnerability ID: V-39668

Group Title: ENTD0290 - Remote access to the environment is not prohibited.

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.