Title

MFDs with print, copy, scan, or fax capabilities must be prohibited on classified networks without the approval of the DAA. (Cat I impact)

Discussion

MFDs with print, copy, scan, or fax capabilities, if compromised, could lead to the compromise of classified data or the compromise of the network. The IAO will ensure MFDs with copy, scan, or fax capabilities are not allowed on classified networks unless approved by the DAA.

Check Content

The reviewer will interview the IAO to verify that MFDs with print, copy, scan, or fax capabilities are prohibited on classified networks unless approved by the DAA.

Fix Text

Remove the MFD from the classified network until DAA approval is obtained.

Additional Identifiers

Rule ID: SV-7025r2_rule

Vulnerability ID: V-6800

Group Title: MFD Classified Network

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.