STIGQter: STIG Summary: Enterprise Voice, Video, and Messaging Policy Security Requirements Guide Version: 1 Release: 4 Benchmark Date: 05 Jan 2026:

The A/B, A/B/C, or A/B/C/D switch used for network switching in IP-based VTC systems implementing a single CODEC that supports conferences on multiple networks with different classification levels must be TEMPEST certified.

DISA Rule

SV-259899r1173870_rule

Vulnerability Number

V-259899

Group Title

SRG-VOIP-000190

Rule Version

SRG-VOIP-000190

Severity

CAT III

CCI(s)

• CCI-002212 - Defines the solutions in approved configurations to be employed to control the flow of organization-defined information across security domains.
• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Obtain and install a TEMPEST-certified A/B, A/B/C, or A/B/C/D switch.

Check Contents

Review the documentation to determine if the A/B, A/B/C, or A/B/C/D switch is TEMPEST certified.

Review TEMPEST certification documentation provided by a CTTA or the vendor to determine if the switch is TEMPEST certified.

If the A/B, A/B/C, or A/B/C/D switch is not on the list, or satisfactory documentation is not provided, this is a finding.

Vulnerability Number

V-259899

Documentable

False

Rule Version

SRG-VOIP-000190

Severity Override Guidance

Review the documentation to determine if the A/B, A/B/C, or A/B/C/D switch is TEMPEST certified.

Review TEMPEST certification documentation provided by a CTTA or the vendor to determine if the switch is TEMPEST certified.

If the A/B, A/B/C, or A/B/C/D switch is not on the list, or satisfactory documentation is not provided, this is a finding.

Check Content Reference

M

Target Key

5585