Test and Development Zone A Security Technical Implementation Guide

The Test and Development Zone A Security Technical Implementation Guide (V1 R6) has 27 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

27STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R6

CurrentPublished Wed Apr 27 2022

Application development must not occur on DoD operational network segments.

Test and Development Zone A Security Technical Implementation Guide

Assessment Title

Rule Text

Application development must not occur on DoD operational network segments.

Description

Discussion Text

To reduce the risk of compromise of DoD operational networks and data, application and system development needs to be limited to systems within a network segment designated for development only.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-39436

Rule

SV-51294r1_rule

Severity

medium

Rule Version

ENTD0060

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Review the organization's network diagrams to determine whether network segments for development have been established and outlined in the documentation.  If application development occurs on DoD operational networks, this is a finding.  

If there isn't any application development occurring in the zone environment, this requirement is not applicable.

Implementation Procedure

Fix Text

Designate network segments for applications and systems development.  Document these designated network segments in the network diagrams for the T&D environment.

STIG check 6 of 27 in the Test and Development Zone A STIG checklist

← Previous · V-39435The organization must document impersistent connections to the test and development environment with approval by the organizations Authorizing Official.Next · V-39437 →Development systems must have antivirus installed and enabled with up-to-date signatures.