What changed in Enterprise Voice, Video, and Messaging Endpoint Security Requirements Guide V1R3V1R3 changes

Enterprise Voice, Video, and Messaging Endpoint Security Requirements Guide V1R3 (2025-10-01) replaced V1R2 (2024-10-24): 3 checks updated. It has 47 checks, against 47 in V1R2.

V1R3 checklistV1R2 checklist Compare V1R2 and V1R3 in STIG Compare

  • 0 added
  • 0 removed
  • 3 updated

Updated fields: CCIs 2Check text 1

Updated in V1R3 (3)

V-259948CAT IIThe Enterprise Voice, Video, and Messaging Endpoint must be configured to disable the Far End Camera Control feature if supported.Check text

Check text

Ensure far end camera control is disabled unless required to satisfy validated, approved, and documented mission requirements. Note: The documented and validated mission requirements along with their approval(s) are maintained by the ISSO for inspection by auditors. Such approval is obtained from the AO or ISSM responsible for the VTU(s) or system. Note: During APL testing, this is a finding in the event this requirement is not supported by the VTU. i.e., far end camera control must be able to be disabled or the feature must not be supported. Determine if remote monitoring is required and approved to meet mission requirements. Have the ISSO or SA demonstrate compliance with the requirement.

V-259948 in V1R3

V-259966CAT IIThe Enterprise Voice, Video, and Messaging Endpoint must be configured to implement replay-resistant authentication mechanisms for network access.CCIs

CCIs

CCI-0019421

V-259966 in V1R3

V-259985CAT IIFor accounts using password or PINs for authentication, the Enterprise Voice, Video, and Messaging Endpoint must store only cryptographic representations of passwords.CCIs

CCIs

CCI-00401962

V-259985 in V1R3

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R3 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.