V1R4 changes
Enterprise Voice, Video, and Messaging Policy Security Requirements Guide V1R4 (2026-01-05) replaced V1R3 (2025-07-02): 20 checks updated. It has 51 checks, against 51 in V1R3.
V1R4 checklistV1R3 checklist Compare V1R3 and V1R4 in STIG Compare
- 0 added
- 0 removed
- 20 updated
Updated fields: CCIs 19Title 1
Updated in V1R4 (20)
V-259890CAT IThe Enterprise Voice, Video, and Messaging Policy must define operations for VTC and endpoint cameras regarding the ability to pick up and transmit sensitive information.CCIs
V-259891CAT IIThe Enterprise Voice, Video, and Messaging Policy must define operations for endpoint microphones regarding the ability to pick up and transmit sensitive information.CCIs
V-259892CAT IIAn IP-based VTC system implementing a single CODEC that supports conferences on multiple networks with different classification levels (i.e., unclassified, SECRET, TOP SECRET, TS-SCI) must support Periods Processing by being sanitized of all information while transitioning from one period/network to the next.CCIs
V-259893CAT IAn IP-based VTC system implementing a single CODEC that supports conferences on multiple networks with different classification levels (i.e., unclassified, SECRET, TOP SECRET, TS-SCI) must support Periods Processing by connecting the CODEC to one network at a time, matching the classification level of the session to the classification level of the network.CCIs
V-259894CAT IIAn IP-based VTC system implementing a single CODEC that supports conferences on multiple networks with different classification levels (i.e., unclassified, SECRET, TOP SECRET, TS-SCI) must support Periods Processing sanitization by purging/clearing volatile memory within the CODEC by powering the CODEC off for a minimum of 60 seconds.CCIs
V-259895CAT IIIP-based VTC systems implementing a single CODEC that support conferences on multiple networks with different classification levels must sanitize nonvolatile memory while transitioning between networks by overwriting all configurable parameters with null settings before reconfiguring the CODEC for connection to the next network.CCIs
V-259896CAT IIThe A/B, A/B/C, or A/B/C/D switch within an IP-based VTC system that supports conferences on multiple networks with different classification levels must be based on optical technologies to maintain electrical isolation between the various networks to which it connects.CCIs
V-259897CAT IIAn IP-based VTC system implementing a single CODEC that supports conferences on multiple networks with different classification levels must be implemented in such a way that configuration information for a network having a higher classification level is not disclosed to a network having a lower classification level.CCIs
V-259898CAT IIThe A/B, A/B/C, or A/B/C/D switch used for network switching in IP-based VTC systems implementing a single CODEC that supports conferences on multiple networks with different classification levels must be Common Criteria certified.CCIs
V-259899CAT IIIThe A/B, A/B/C, or A/B/C/D switch used for network switching in IP-based VTC systems implementing a single CODEC that supports conferences on multiple networks with different classification levels must be TEMPEST certified.CCIs
V-259900CAT IIAn IP-based VTC system implementing a single set of input/output devices (cameras, microphones, speakers, control system), an A/V switcher, and multiple CODECs connected to multiple IP networks with different classification levels must provide automatic mutually exclusive power control for the CODECs or their network connections so only one CODEC is powered on or one CODEC is connected to any network at any given time.CCIs
V-259901CAT IIThe implementation of an IP-based VTC system that supports conferences on multiple networks with different classification levels must maintain isolation between the networks to which it connects by implementing separation of equipment and cabling between the various networks with differing classification levels in accordance with CNSSAM TEMPEST/01-13, RED/BLACK Installation Guidance.CCIs
V-259902CAT IIVideo conferencing, Unified Capability (UC) soft client, and speakerphone speaker operations policy must prevent disclosure of sensitive or classified information over nonsecure systems.CCIs
V-259903CAT IIAn inventory of authorized instruments must be documented and maintained in support of the detection of unauthorized instruments connected to the Enterprise Voice, Video, and Messaging system.CCIs
V-259904CAT IIICustomers of the DISN VoSIP service must use address blocks assigned by the DRSN/VoSIP PMO.CCIs
V-259905CAT IIVoice networks must not be bridged via a Unified Capability (UC) soft client accessory.CCIs
V-259906CAT IIWhen soft-phones are implemented as the primary voice endpoint in the user's workspace, a policy must be defined to supplement with physical hardware-based phones near all such workspaces.CCIs
V-259907CAT IIImplementing Unified Capabilities (UC) soft clients as the primary voice endpoint must have authorizing official (AO) approval.CCIs
V-259908CAT IIDeploying Unified Capabilities (UC) soft clients on DOD networks must have authorizing official (AO) approval.CCIs
V-259917CAT IIThe required dual homed DISN Core or NIPRNet access circuits must follow geographically diverse paths from the CER(s) along the entire route to the geographically diverse SDNs.Title
Title
The required dua-dual homed DISN Core or NIPRNet access circuits must follow geographically diverse paths from the CER(s) along the entire route to the geographically diverse SDNs.
How these changes are found
Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R4 no longer has.
Comparing other releases, or this one against an older release? Pick any two in STIG Compare.