Title

The organization must reasonably size and constrain the Wireless Metropolitan Area Network (WMAN) signals to their intended coverage area. (Cat III impact)

Discussion

Wireless signals can be intercepted more easily by an adversary than a wired signal due to the nature of the technology. DoD data may be at risk of exposure if the signals are not constrained to an area that is appropriately sized. This requirement originated in DTM 08-039, "Commercial Wireless Metropolitan Area Network (WMAN) Systems and Technology."

Check Content

Review the site accreditation documentation. Verify that during system design or accreditation process an appropriate WMAN coverage area was determined. Compare the actual radio coverage of the WMAN system with the intended coverage area map. If the actual radio coverage is 10% more than the intended coverage area map, this is a finding.

Fix Text

Update coverage map documentation, reconfigure radio power output settings to the previously approved level, or conduct a new risk assessment based on the new coverage area.

Additional Identifiers

Rule ID:

Vulnerability ID: V-35939

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.