STIGQter: STIG Summary: Traditional Security Checklist Version: 1 Release: 3 Benchmark Date: 15 Jun 2020:

Vault/Secure Room Storage Standards - IDS Access/Secure Control Units Must be Located within the Secure Room Space

DISA Rule

SV-41563r3_rule

Vulnerability Number

V-31292

Group Title

Vault/Secure Room Standards - IDS Access/Secure Control Unit Location

Rule Version

IS-02.01.12

Severity

CAT I

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

No capability must exist to allow for changing the access/secure status of the IDS from a location outside the protected area (secure room or vault). Alarm sensor control units must be located inside the secure area and should be located near the primary entrance for ease of accessing and securing alarm sensors in the space. Only assigned personnel with proper security clearances and need-to-know should initiate changes in access and secure status.

Check Contents

Requirement Explanation:

Alarm sensor control units must be located inside the secure area and should be located near the primary entrance for ease of accessing and securing alarm sensors in the space.

Only assigned personnel with proper security clearances and need-to-know should initiate changes in access and secure status.

Check:

Check to ensure that no capability exists to allow changing the access/secure status of the IDS from a location outside the protected area (secure room or vault).

TACTICAL ENVIRONMENT: This check is applicable where Vaults/Secure Rooms are used to protect classified materials or systems in a tactical environment. The only exception will be for urgent (short term) tactical operations or other contingency situations where fixed facilities and equipment are not yet present or incapable of being used.

Vulnerability Number

V-31292

Documentable

False

Rule Version

IS-02.01.12

Severity Override Guidance

Requirement Explanation:

Alarm sensor control units must be located inside the secure area and should be located near the primary entrance for ease of accessing and securing alarm sensors in the space.

Only assigned personnel with proper security clearances and need-to-know should initiate changes in access and secure status.

Check:

Check to ensure that no capability exists to allow changing the access/secure status of the IDS from a location outside the protected area (secure room or vault).

TACTICAL ENVIRONMENT: This check is applicable where Vaults/Secure Rooms are used to protect classified materials or systems in a tactical environment. The only exception will be for urgent (short term) tactical operations or other contingency situations where fixed facilities and equipment are not yet present or incapable of being used.

Check Content Reference

M

Potential Impact

IA Controls: PESS-1 Storage PEPF-2 (IDS)

Target Key

2506

Comments