Check: SRG-MPOL-032
Mobile Policy SRG:
SRG-MPOL-032
(in version v1 r2)
Title
The organization must notify the Certified TEMPEST Technical Authority (CTTA) before a Secure WLAN (SWLAN) becomes operational and connected to the SIPRNet. (Cat II impact)
Discussion
A TEMPEST review must be completed or classified information may be at risk of exposure.
Check Content
Review local documentation to verify the local CTTA has been notified of the site's intent to install and operate a SWLAN. If the local CTTA has not been notified, this is a finding.
Fix Text
Confirm and document the local CTTA has been notified of the site's intent to install and operate a SWLAN.
Additional Identifiers
Rule ID:
Vulnerability ID: V-35950
Group Title:
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-001441 |
The organization authorizes wireless access to the information system prior to allowing such connections. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| AC-18 |
Wireless Access |