Check: SRG-NET-000236-VVSM-00047
Voice Video Session Management SRG:
SRG-NET-000236-VVSM-00047
(in versions v2 r2 through v1 r5)
Title
In the event of a system failure, Voice Video Session Managers must preserve any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to mission processes. (Cat II impact)
Discussion
Failure in a known state can address safety or security in accordance with the mission needs of the organization. Failure to a known secure state helps prevent a loss of confidentiality, integrity, or availability in the event of a failure of the information system or a component of the system. Preserving voice video session manager state information helps to facilitate restart and return to the operational mode of the organization with less disruption to mission-essential processes. This control only applies to Committee on National Security Systems Instruction (CNSSI) 1253 high confidentiality and integrity baselines.
Check Content
Verify that in the event of a system failure, the Voice Video Session Managers preserves any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to mission processes. If the Voice Video Session Managers does not preserve all information necessary to determine cause of failure, this is a finding. If the Voice Video Session Managers does not preserve all information necessary to return to operations with least disruption to mission processes, this is a finding.
Fix Text
Configure the Voice Video Session Manager, in the event of a system failure, to preserve any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to mission processes.
Additional Identifiers
Rule ID: SV-206836r508661_rule
Vulnerability ID: V-206836
Group Title: SRG-NET-000236
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-001665 |
The information system preserves organization-defined system state information in the event of a system failure. |
Controls
Number | Title |
---|---|
SC-24 |
Fail In Known State |