Check: ENTD0350
Test and Development Zone D STIG:
ENTD0350
(in versions v1 r6 through v1 r3)
Title
The organization must have a current ISP GIG Waiver for any ISP connections to the test and development environment. (Cat III impact)
Discussion
The test and development environment is typically a closed and physically separated network with no external connectivity to the DISN or Internet. In some instances, Internet connectivity is needed for this environment due to the flexibility it provides for nonoperational systems. In this case, an ISP GIG Waiver is required, along with approval from the organization's Authorizing Official.
Check Content
Verify the organization has an ISP GIG Waiver for any Internet connection. The documentation should be up to date and included with the accreditation package. If no ISP GIG Waiver has been obtained or is not up to date, this is a finding.
Fix Text
Obtain an ISP GIG Waiver for any Internet connection into the test and development environment.
Additional Identifiers
Rule ID: SV-51541r1_rule
Vulnerability ID: V-39674
Group Title: ENTD0350 - A current ISP GIG waiver does not exist.
Expert Comments
CCIs
Number | Definition |
---|---|
No CCIs are assigned to this check |
Controls
Number | Title |
---|---|
No controls are assigned to this check |