Title

The Voice Video Session Manager must alert the ISSO and SA (at a minimum) in the event of a session (call) record system failure. (Cat II impact)

Discussion

It is critical for the appropriate personnel to be aware if a system is at risk of failing to process session records. Without this notification, the security personnel may be unaware of an impending failure of the session record capability. Session record processing failures include software/hardware errors, failures in the capturing mechanisms, and storage capacity being reached or exceeded. This requirement applies to each session record data storage repository (i.e., distinct information system component where session records are stored), the centralized session record storage capacity of organizations (i.e., all session record data storage repositories combined), or both.

Check Content

Verify the Voice Video Session Manager alerts the ISSO and SA (at a minimum) in the event of a session record system failure. If the Voice Video Session Manager does not alert the ISSO and SA (at a minimum) in the event of a session record system failure, this is a finding.

Fix Text

Configure the Voice Video Session Manager to alert the ISSO and SA (at a minimum) in the event of a session record system failure.

Additional Identifiers

Rule ID: SV-206822r508661_rule

Vulnerability ID: V-206822

Group Title: SRG-NET-000088

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.