STIGQter: STIG Summary: Test and Development Zone D Security Technical Implementation Guide Version: 1 Release: 5 Benchmark Date: 26 Oct 2018:

The organization must have a current ISP GIG Waiver for any ISP connections to the test and development environment.

DISA Rule

SV-51541r1_rule

Vulnerability Number

V-39674

Group Title

ENTD0350 - A current ISP GIG waiver does not exist.

Rule Version

ENTD0350

Severity

CAT III

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Obtain an ISP GIG Waiver for any Internet connection into the test and development environment.

Check Contents

Verify the organization has an ISP GIG Waiver for any Internet connection. The documentation should be up to date and included with the accreditation package. If no ISP GIG Waiver has been obtained or is not up to date, this is a finding.

Vulnerability Number

V-39674

Documentable

False

Rule Version

ENTD0350

Severity Override Guidance

Verify the organization has an ISP GIG Waiver for any Internet connection. The documentation should be up to date and included with the accreditation package. If no ISP GIG Waiver has been obtained or is not up to date, this is a finding.

Check Content Reference

M

Target Key

1134

Comments