Title

Foreign national personnel access to DRSN systems must be limited as directed by applicable DoD policy. (Cat II impact)

Discussion

Foreign national personnel must be limited in their access to DoD Information Systems (ISs) to prevent the unauthorized disclosure of classified information. Access to DoD ISs must be authorized by the DoD Component head in accordance with DoD, Department of State, and ODNI disclosure guidance, as applicable. Mechanisms must also be in place to limit access strictly to information that has been cleared for release to the represented foreign nation, coalition, or international organization.

Check Content

Review site documentation to confirm a policy and procedure requires foreign national personnel access is limited as directed by applicable DoD policy. If foreign national personnel access to DRSN systems is not limited as directed by applicable DoD policy, this is a finding.

Fix Text

Implement a policy or procedure requiring foreign national personnel access to DRSN systems must be limited as directed by applicable DoD policy.

Additional Identifiers

Rule ID: SV-9017r2_rule

Vulnerability ID: V-8520

Group Title: Foreign National access

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.