CCI-001449

Disable, when not intended for use, wireless networking capabilities internally embedded within system components prior to issuance and deployment.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to disable wireless networking capabilities internally embedded within information system components prior to issuance and deployment when not intended for use.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process to ensure the organization being inspected/assessed disables, when not intended for use, wireless networking capabilities internally embedded within information system components prior to issuance and deployment. The organization conducting the inspection/assessment obtains and examines a sampling of information systems to ensure that any internally embedded wireless networking capabilities are disabled unless a documented need exists.

Compelling Evidence

1.) Signed and dated documentation (Standard Operating Procedures, Concept of Operations, or System Security plan) that describes the process of how the site disables, when not intended for use, wireless networking capabilities internally embedded within information system components prior to issuance and deployment. 2.) Sampling of information system (network diagram)

The controls below (if any) were marked by NIST as being related to CCI-001449.