Check: ENTD0210
Test and Development Zone D STIG:
ENTD0210
(in versions v1 r6 through v1 r3)
Title
The test and development environment must not have access to DoD operational networks. (Cat II impact)
Discussion
Systems or devices used for test data that do not meet minimum IA standards for accreditation are a risk to a DoD operational network if allowed to communicate between environments. Data that has not been fully tested and finalized for use in an operational network may cause unintended consequences, such as data loss or corruption. Unvetted data allowed into a DoD operational network from non-IA-compliant machines may also contain malicious code that could be used to steal or damage live data.
Check Content
Determine whether there are procedures in place to prohibit non-IA-compliant systems or devices from accessing any DoD operational network. If no procedure is in place to prohibit connection to any DoD operational network by non-IA-compliant systems, this is a finding.
Fix Text
Prohibit non-IA-compliant systems or devices in the test and development environment from accessing any DoD operational network or live data.
Additional Identifiers
Rule ID: SV-51527r1_rule
Vulnerability ID: V-39660
Group Title: ENTD0210 - Test and development environment has access to DoD operational networks.
Expert Comments
CCIs
Number | Definition |
---|---|
No CCIs are assigned to this check |
Controls
Number | Title |
---|---|
No controls are assigned to this check |