Navigate

SI-4 (14)

SI-4 (14): Wireless Intrusion Detection

The organization employs a wireless intrusion detection system to identify rogue wireless devices and to detect attack attempts and potential compromises/breaches to the information system.

Supplemental

Wireless signals may radiate beyond the confines of organization-controlled facilities. Organizations proactively search for unauthorized wireless connections including the conduct of thorough scans for unauthorized wireless access points. Scans are not limited to those areas within facilities containing information systems, but also include areas outside of facilities as needed, to verify that unauthorized wireless access points are not connected to the systems.

CIA Levels
Confidentiality	low
Integrity	low
Availability	low

Overlays
Classified, Cross Domain (Access), Cross Domain (Multilevel), Cross Domain (Transfer), Int-A, Int-B, Int-C

Related Controls

The controls below (if any) were marked by NIST as being related to SI-4 (14).

Control	Description
AC-18	The organization: AC-18a.: Establishes usage restrictions, configuration/connection requirements, and implementation guidance for wireless access; and AC-18b.: Authorizes wireless access to the information system prior to allowing such connections.
IA-3	The information system uniquely identifies and authenticates [Assignment: organization-defined specific and/or types of devices] before establishing a [Selection (one or more): local; remote; network] connection.

Enhancements

The controls below (if any) add on to the requirements of SI-4 (14).

Control	Description
No controls

Related CCIs

The CCIs below are tied to SI-4 (14).

CCI	Definition
CCI-001673	The organization employs a wireless intrusion detection system to identify rogue wireless devices and to detect attack attempts and potential compromises/breaches to the information system.