CCI-001958

The information system authenticates an organization-defined list of specific and/or types of devices before establishing a local, remote, or network connection.

Implementation Guidance

The organization being inspected/assessed configures the network infrastructure to authenticate all mobiles devices and network connected endpoint devices (including but not limited to: workstations, printers, servers (outside a datacenter), VoIP Phones, VTC CODECs) before establishing a local, remote, network connection. For information system components that have applicable STIGs or SRGs, the organization being inspected/assessed must comply with the STIG/SRG guidance that pertains to CCI 1958. DoD has defined the value as all mobile devices and network connected endpoint devices (including but not limited to: workstations, printers, servers (outside a datacenter), VoIP Phones, VTC CODECs).

Validation Procedures

The organization conducting the inspection/assessment examine a sampling of the network infrastructure device configurations to ensure devices connecting to the infrastructure are uniquely authenticated. For information system components that have applicable STIGs or SRGs, the organization conducting the inspection/assessment evaluates the components to ensure that the organization being inspected/assessed has configured the information system in compliance with the applicable STIGs and SRGs pertaining to CCI 1958.

Compelling Evidence

workstations, printers, servers (outside a datacenter), VoIP Phones, VTC CODECs) before establishing a local remote network connection. 2.) Applicable STIG/SRG checks

The controls below (if any) were marked by NIST as being related to CCI-001958.