Title

Unified Capabilities (UC) soft clients must be tested and approved prior to implementation. (Cat II impact)

Discussion

It is important that UC soft clients be tested and subsequently certified and accredited for IA purposes, to include upgrades or patches. Applications that have not been sufficiently vetted may introduce malware to the network or have security issues an adversary may manipulate.

Check Content

Review the site documentation to confirm UC soft clients are tested and approved prior to implementation. If the confirm UC soft clients are not tested and approved prior to implementation, this is a finding.

Fix Text

Ensure UC soft clients are tested and approved prior to implementation.

Additional Identifiers

Rule ID: SV-17095r2_rule

Vulnerability ID: V-16107

Group Title: VVoIP 1125

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.