STIGQter: STIG Summary: CA IDMS Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 01 Jul 2026:

The DBMS must associate organization-defined types of security labels having organization-defined security label values with information in process.

DISA Rule

SV-251655r1138541_rule

Vulnerability Number

V-251655

Group Title

SRG-APP-000313-DB-000309

Rule Version

IDMS-DB-000940

Severity

CAT II

CCI(s)

• CCI-002263 - Provides the means to associate organization-defined types of security attributes having organization-defined security attribute values with information in process.

Weight

10

Fix Recommendation

Update an application DB to include label fields in each database record and to maintain the status through the application.

Check Contents

If the site system plan does not require security labels, this requirement is Not Applicable.

Consult the system DBA and review system procedures for an application that maintains security label processing.

If there is no label application procedure, this is a finding.

Vulnerability Number

V-251655

Documentable

False

Rule Version

IDMS-DB-000940

Severity Override Guidance

If the site system plan does not require security labels, this requirement is Not Applicable.

Consult the system DBA and review system procedures for an application that maintains security label processing.

If there is no label application procedure, this is a finding.

Check Content Reference

M

Target Key

5418