Title

A current drawing of the site’s SAN topology that includes all external and internal links, zones, and all interconnected equipment is not being maintained. (Cat II impact)

Discussion

A drawing of the SAN topology gives the IAO and other interested individuals a pictorial representation of the SAN. This can be helpful in diagnosing potential security problems. The IAO/NSO will maintain a current drawing of the site’s SAN topology that includes all external and internal links, zones, and all interconnected equipment.

Check Content

The reviewer will interview the IAO/NSO and view the drawings supplied to verify that a current drawing of the site’s SAN topology that includes all external and internal links, zones, and all interconnected equipment.

Fix Text

Create drawing of the site’s SAN topology that includes all external and internal links, zones, and all interconnected equipment.

Additional Identifiers

Rule ID: SV-6748r1_rule

Vulnerability ID: V-6628

Group Title: SAN Topology Drawing

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.