Check: ENTD0200
Test and Development Zone D STIG:
ENTD0200
(in versions v1 r6 through v1 r3)
Title
The Zone D test and development environment must be physically separate and isolated from any DoD operational network. (Cat I impact)
Discussion
Systems found in the Zone D test and development environment are typically non-IA-compliant test systems that include hardware, software, or development systems. These systems typically do not follow the appropriate best security practices. Therefore, if they are connected to any operational network, it is possible to infect live data or degrade infrastructure in an operational network.
Check Content
Review the organization's network diagrams for the Zone D test and development environment and work with the network reviewer to determine whether the environment is physically separate and isolated from any DoD operational network. If physical separation or isolation is not shown for the Zone D test and development environment on the network diagrams, this is a finding.
Fix Text
Physically separate and isolate the Zone D test and development environment from any DoD operational network.
Additional Identifiers
Rule ID: SV-51526r2_rule
Vulnerability ID: V-39659
Group Title: ENTD0200 - Zone D test and development environment not physically separate.
Expert Comments
CCIs
Number | Definition |
---|---|
No CCIs are assigned to this check |
Controls
Number | Title |
---|---|
No controls are assigned to this check |