Title

Physical security of the system must meet DoD requirements. (Cat II impact)

Discussion

Inadequate physical protection can undermine all other security precautions utilized to protect the system. This can jeopardize the confidentiality, availability, and integrity of the system. Physical security of the AIS is the first line protection of any system. Physical security of the Automated Information System (AIS) must meet DoD requirements.

Check Content

Interview the SA to determine if equipment is located in a controlled access area.

Fix Text

Relocate equipment to a controlled access area.

Additional Identifiers

Rule ID: SV-38583r1_rule

Vulnerability ID: V-25372

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.