Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Controlled Unclassified Information - Transmission by either Physical or Electronic Means
Description
Discussion Text
Failure to handle/transmit CUI in an approved manner can result in the loss or compromise of sensitive information.
REFERENCES:
Executive Order 13556, Controlled Unclassified Information (CUI)
The Information Security Oversight Office (ISOO): https://www.archives.gov/cui
NIST FIPS 140-2, Security Requirements for Cryptographic Modules
DODI 8520.2, "Public Key Infrastructure (PKI) and Public Key Enabling (PKE)"
CJCSI 6510.01F, INFORMATION ASSURANCE (IA) AND SUPPORT TO COMPUTER NETWORK DEFENSE (CND); Enclosure A, paragraphs 13.a., 13.b.(2)(3), and Enclosure C, paragraphs 22.d,, 25.a.,d.,e.,f., 26.j.(2), and 35.a.
NIST Special Publication 800-53 (SP 800-53), Rev 4, Controls: AC-17, AC-20, IA-2, SC-8, SC-9, and SC-23.
DoD Manual 5200.01, Volume 3, 24 February 2012, SUBJECT: DoD Information Security Program: Protection of Classified Information; Enclosure 7, paragraph 13.
DoD Manual 5200.01, Volume 4, SUBJECT: DoD Information Security Program: Controlled Unclassified Information (CUI); Enclosure 3., paragraphs 2.e.(2), 4.d.(1), 4.e.(1)(2), 5.d.(2), and 6.b.(4)(a)&(b).
REFERENCES:
Executive Order 13556, Controlled Unclassified Information (CUI)
The Information Security Oversight Office (ISOO): https://www.archives.gov/cui
NIST FIPS 140-2, Security Requirements for Cryptographic Modules
DODI 8520.2, "Public Key Infrastructure (PKI) and Public Key Enabling (PKE)"
CJCSI 6510.01F, INFORMATION ASSURANCE (IA) AND SUPPORT TO COMPUTER NETWORK DEFENSE (CND); Enclosure A, paragraphs 13.a., 13.b.(2)(3), and Enclosure C, paragraphs 22.d,, 25.a.,d.,e.,f., 26.j.(2), and 35.a.
NIST Special Publication 800-53 (SP 800-53), Rev 4, Controls: AC-17, AC-20, IA-2, SC-8, SC-9, and SC-23.
DoD Manual 5200.01, Volume 3, 24 February 2012, SUBJECT: DoD Information Security Program: Protection of Classified Information; Enclosure 7, paragraph 13.
DoD Manual 5200.01, Volume 4, SUBJECT: DoD Information Security Program: Controlled Unclassified Information (CUI); Enclosure 3., paragraphs 2.e.(2), 4.d.(1), 4.e.(1)(2), 5.d.(2), and 6.b.(4)(a)&(b).
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.