Title

The VMM must prohibit the use or connection of unauthorized hardware components. (Cat II impact)

Discussion

Hardware components provide the foundation for organizational systems and the platform for the execution of authorized software programs. Managing the inventory of hardware components and controlling which hardware components are permitted to be installed or connected to organizational systems is essential to provide adequate security.

Check Content

Verify the VMM is configured to prohibit the use or connection of unauthorized hardware components. If the VMM is not configured to prohibit the use or connection of unauthorized hardware components, this is a finding.

Fix Text

Configure the VMM to prohibit the use or connection of unauthorized hardware components.

Additional Identifiers

Rule ID: SV-264316r984263_rule

Vulnerability ID: V-264316

Group Title: SRG-OS-000690

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.