The publicly accessible application must display the Standard Mandatory DoD Notice and Consent Banner before granting access to Innoslate.
DISA Rule
SV-254091r845249_rule
Vulnerability Number
V-254091
Group Title
SRG-APP-000070
Rule Version
SPEC-IN-000110
Severity
CAT II
CCI(s)
- CCI-000048 - Display an organization-defined system use notification message or banner to users before granting access to the system that provides privacy and security notices consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidelines.
- CCI-000050 - Retain the notification message or banner on the screen until users acknowledge the usage conditions and take explicit actions to log on to or further access the system.
- CCI-001384 - For publicly accessible systems, display system use information with organization-defined conditions before granting further access to the publicly accessible system.
- CCI-001385 - For publicly accessible systems, displays references, if any, to monitoring that are consistent with privacy accommodations for such systems that generally prohibit those activities.
- CCI-001386 - For publicly accessible systems, displays references, if any, to recording that are consistent with privacy accommodations for such systems that generally prohibit those activities.
- CCI-001387 - For publicly accessible systems, displays references, if any, to auditing that are consistent with privacy accommodations for such systems that generally prohibit those activities.
- CCI-001388 - For publicly accessible systems, includes a description of the authorized uses of the system.
Weight
10
Fix Recommendation
1. Sign in to Innoslate.
2. Enter a project.
3. In the top right, select the "Gear" icon, and then select "Banner".
4. Insert DoD Banner Text and click "Save".
Check Contents
1. Sign in to Innoslate.
2. Enter a project.
3. If the DoD Banner does not appear correctly, this is a finding.
Vulnerability Number
V-254091
Documentable
False
Rule Version
SPEC-IN-000110
Severity Override Guidance
1. Sign in to Innoslate.
2. Enter a project.
3. If the DoD Banner does not appear correctly, this is a finding.
Check Content Reference
M
Target Key
5481
STIGQter: STIG Summary: SPEC Innovations Innoslate 4.x Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 08 Sep 2022: