STIGQter: STIG Summary: Voice Video Services Policy Security Technical Implementation Guide Version: 3 Release: 17 Benchmark Date: 25 Oct 2019:

The Fire and Emergency Services (FES) communications over a sites private telephone system must provide a direct callback telephone number and physical location of an FES caller to the emergency services answering point or call center through a transfer of Automatic Number Identification (ANI) and extended Automatic Location Identification (ALI) information or access to an extended ALI database.

DISA Rule

SV-23719r3_rule

Vulnerability Number

V-21510

Group Title

VVT 2015

Rule Version

VVT 2015

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure the local DoD telephone system, VoIP or traditional, to provide the originating telephone number and the physical location of an F&ES caller to the emergency services answering point through a transfer of Automatic Number Identification (ANI) and Phone Switch Automatic Location Identification (PS-ALI) information or the emergency services answering point is provided automated access to the required PS-ALI database.

Check Contents

Interview the ISSO to validate compliance with the following requirement:
Inspect the telephone system configuration or external database to determine compliance with the requirement. Verify the local DoD telephone system, VoIP or traditional, is configured to provide the originating telephone number and the physical location of an F&ES caller to the emergency services answering point through a transfer of Automatic Number Identification (ANI) and Phone Switch Automatic Location Identification (PS-ALI) information or the emergency services answering point is provided automated access to the required PS-ALI database.

If the location of an F&ES caller is not is not provided to, or is not accessible by, the emergency services answering point or call center, this is a finding.

NOTE: These requirements also apply to key telephone systems and installations where a single number has multiple appearances (appears on multiple telephones) such that individual instruments in the system can be identified.

Vulnerability Number

V-21510

Documentable

False

Rule Version

VVT 2015

Severity Override Guidance

Interview the ISSO to validate compliance with the following requirement:
Inspect the telephone system configuration or external database to determine compliance with the requirement. Verify the local DoD telephone system, VoIP or traditional, is configured to provide the originating telephone number and the physical location of an F&ES caller to the emergency services answering point through a transfer of Automatic Number Identification (ANI) and Phone Switch Automatic Location Identification (PS-ALI) information or the emergency services answering point is provided automated access to the required PS-ALI database.

If the location of an F&ES caller is not is not provided to, or is not accessible by, the emergency services answering point or call center, this is a finding.

NOTE: These requirements also apply to key telephone systems and installations where a single number has multiple appearances (appears on multiple telephones) such that individual instruments in the system can be identified.

Check Content Reference

M

Responsibility

Other

Target Key

594

Comments