STIGQter: STIG Summary: Enterprise Voice, Video, and Messaging Policy Security Requirements Guide Version: 1 Release: 4 Benchmark Date: 05 Jan 2026:

An IP-based VTC system implementing a single CODEC that supports conferences on multiple networks with different classification levels (i.e., unclassified, SECRET, TOP SECRET, TS-SCI) must support Periods Processing sanitization by purging/clearing volatile memory within the CODEC by powering the CODEC off for a minimum of 60 seconds.

DISA Rule

SV-259894r1173865_rule

Vulnerability Number

V-259894

Group Title

SRG-VOIP-000140

Rule Version

SRG-VOIP-000140

Severity

CAT II

CCI(s)

CCI-002204 - Defines the security or privacy policy which prohibits the transfer of unsanctioned information between different security domains.
CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

Sanitize volatile memory by disconnection of all power for at least 60 seconds.

Check Contents

Observe the operation of the VTC system as it transitions between networks.

Verify that the CODEC is powered off for a minimum of 60 seconds during the transition.

If it is not, this is a finding.

Vulnerability Number

V-259894

Documentable

False

Rule Version

SRG-VOIP-000140

Severity Override Guidance

Observe the operation of the VTC system as it transitions between networks.

Verify that the CODEC is powered off for a minimum of 60 seconds during the transition.

If it is not, this is a finding.

Check Content Reference

Target Key

5585