STIGQter: STIG Summary: Network Infrastructure Policy Security Technical Implementation Guide Version: 9 Release: 10 Benchmark Date: 24 Jan 2020:

External connections to the network must be reviewed and the documentation updated semi-annually.

DISA Rule

SV-8534r4_rule

Vulnerability Number

V-8048

Group Title

External connections not documented or reviewed.

Rule Version

NET0135

Severity

CAT II

CCI(s)

• CCI-001121 - The organization protects against unauthorized physical connections at organization-defined managed interfaces.

Weight

10

Fix Recommendation

Implement a semi-annual review process to document and account for external connections to the organization.

Check Contents

Review the network topology and interview the ISSO to verify that external connections to the network are reviewed and documented on a semi-annual basis.

If there are any external connections that have not been documented, or if the connections are not reviewed on a semi-annual basis, this is a finding.

Vulnerability Number

V-8048

Documentable

False

Rule Version

NET0135

Severity Override Guidance

Review the network topology and interview the ISSO to verify that external connections to the network are reviewed and documented on a semi-annual basis.

If there are any external connections that have not been documented, or if the connections are not reviewed on a semi-annual basis, this is a finding.

Check Content Reference

M

Target Key

838

Comments