Windows Vista STIG Version Comparison

There are 251 differences between versions v6 r44 (Oct. 28, 2016) (the "left" version) and v6 r42 (April 28, 2017) (the "right" version).

Check 1.001 was added to the benchmark in the "right" version.

This check's original form is available here.

Title

Physical security of the Automated Information System (AIS) does not meet DISA requirements.

Check Content

Interview the SA to determine if equipment is located in an access controlled area. Note: Servers will be located in rooms, or locked cabinets, that are accessible only to authorized systems personnel. Authorized user access should be verified at two points (i.e. building access and server room). User workstations containing sensitive data should be in access controlled areas.

Discussion

Inadequate physical protection can undermine all other security precautions utilized to protect the system. This can jeopardize the confidentiality, availability, and integrity of the system. Physical security of the AIS is the first line protection of any system.

Fix

Relocate equipment to a controlled access area.