What changed in Traditional Security Checklist STIG V2R10V2R10 changes

Traditional Security Checklist STIG V2R10 (2026-09-30) replaced V2R9 (2026-07-01): 123 checks updated. It has 144 checks, against 144 in V2R9.

V2R10 checklistV2R9 checklist Compare V2R9 and V2R10 in STIG Compare

  • 0 added
  • 0 removed
  • 123 updated

Updated fields: Discussion 122Check text 36Fix text 32Title 2

Updated in V2R10 (123)

V-245722CAT ICOMSEC Account Management - Equipment and Key StorageFix text, Discussion

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245722 in V2R10

V-245723CAT IIICOMSEC Account Management - Appointment of Responsible PersonCheck text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245723 in V2R10

V-245724CAT IIICOMSEC Account Management - Program Management and Standards ComplianceCheck text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245724 in V2R10

V-245725CAT IICOMSEC Training - COMSEC Custodian or Hand Receipt HolderCheck text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245725 in V2R10

V-245726CAT IICOMSEC Training - COMSEC UserCheck text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245726 in V2R10

V-245727CAT IClassified Transmission - Electronic Means using Cryptographic System Authorized by the Director, NSADiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245727 in V2R10

V-245728CAT IProtected Distribution System (PDS) Construction - Point of Presence (PoP) and Terminal Equipment Protection. This requirement concerns security of both the starting and ending points for PDS within proper physically protected and access controlled environments.Check text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245728 in V2R10

V-245729CAT IProtected Distribution System (PDS) Construction - Hardened CarrierDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245729 in V2R10

V-245730CAT IProtected Distribution System (PDS) Construction - Pull Box SecurityCheck text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245730 in V2R10

V-245731CAT IProtected Distribution System (PDS) Construction - Buried PDS CarrierCheck text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245731 in V2R10

V-245732CAT IProtected Distribution System (PDS) Construction - External Suspended PDSDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245732 in V2R10

V-245733CAT IProtected Distribution System (PDS) Construction - Continuously Viewed CarrierDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245733 in V2R10

V-245734CAT IProtected Distribution System (PDS) Construction - Tactical Environment ApplicationDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245734 in V2R10

V-245735CAT IProtected Distribution System (PDS) Construction - Alarmed CarrierDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245735 in V2R10

V-245736CAT IIProtected Distribution System (PDS) Construction - Visible for Inspection and MarkedDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245736 in V2R10

V-245737CAT IIProtected Distribution System (PDS) Construction - Sealed JointsDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245737 in V2R10

V-245738CAT IIIProtected Distribution System (PDS) Documentation - Signed ApprovalDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245738 in V2R10

V-245739CAT IIIProtected Distribution System (PDS) Documentation - Request for Approval DocumentationDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245739 in V2R10

V-245740CAT IIProtected Distribution System (PDS) Monitoring - Daily (Visual) ChecksDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245740 in V2R10

V-245741CAT IIProtected Distribution System (PDS) Monitoring - Reporting IncidentsDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245741 in V2R10

V-245742CAT IIIProtected Distribution System (PDS) Monitoring - Technical InspectionsDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245742 in V2R10

V-245743CAT IIIProtected Distribution System (PDS) Monitoring - Initial InspectionDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245743 in V2R10

V-245744CAT IIEnvironmental IA Controls - Emergency Power Shut-Off (EPO)Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245744 in V2R10

V-245745CAT IIEnvironmental IA Controls - Emergency Lighting and Exits - Properly InstalledDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245745 in V2R10

V-245746CAT IIIEnvironmental IA Controls - Emergency Lighting and Exits - Documentation and TestingDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245746 in V2R10

V-245747CAT IIIEnvironmental IA Controls - Voltage Control (power)Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245747 in V2R10

V-245748CAT IIEnvironmental IA Controls - Emergency PowerDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245748 in V2R10

V-245749CAT IIIEnvironmental IA Controls - TrainingDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245749 in V2R10

V-245750CAT IIIEnvironmental IA Controls - TemperatureDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245750 in V2R10

V-245751CAT IIIEnvironmental IA Controls - HumidityDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245751 in V2R10

V-245752CAT IIIEnvironmental IA Controls - Fire Inspections/DiscrepanciesDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245752 in V2R10

V-245753CAT IIIEnvironmental IA Controls - Fire Detection and SuppressionDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245753 in V2R10

V-245754CAT IITEMPEST CountermeasuresDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245754 in V2R10

V-245755CAT IITEMPEST - Red/Black separation (Processors)Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245755 in V2R10

V-245756CAT IITEMPEST - Red/Black Separation (Cables)Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245756 in V2R10

V-245757CAT IIForeign National System Access - Identification as FN in Email AddressCheck text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Foreign Nationals (including those foreign nationals serving in the US military) granted e-mail privileges on DODDoW systems must be clearly identified as such in their e-mail addresses IAW DODI 8500.01, SUBJECT: Cybersecurity and CJCSI 6510.01F.

Discussion

Too long to include here — see it in STIG Compare.

V-245757 in V2R10

V-245758CAT IIIForeign National System Access - Local Access Control ProceduresCheck text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245758 in V2R10

V-245759CAT IForeign National (FN) Systems Access - Local Nationals Overseas System Access - (SIPRNet or Other Classified System or Classified Network being Reviewed)Check text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245759 in V2R10

V-245761CAT IIForeign National (FN) Systems Access - Local Nationals Overseas System Access - (NIPRNet User)Check text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245761 in V2R10

V-245762CAT IIForeign National (FN) Systems Access - Delegation of Disclosure Authority Letter (DDL)Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245762 in V2R10

V-245763CAT IForeign National System Access - FN or Immigrant Aliens (not representing a foreign government or entity) System Access - Limited Access Authorization (LAA)Check text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245763 in V2R10

V-245764CAT IForeign National (FN) System Access - FN or Immigrant Aliens (not representing a foreign government or entity) with LAA Granted Uncontrolled AccessCheck text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245764 in V2R10

V-245765CAT IForeign National (FN) Physical Access Control - Areas Containing US Only Information Systems Workstations/Monitor Screens, Equipment, Media or DocumentsDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245765 in V2R10

V-245766CAT IIIForeign National (FN) Physical Access Control - (Identification Badges)Check text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245766 in V2R10

V-245767CAT IForeign National (FN) Administrative Controls - Proper Investigation and Clearance for Access to Classified Systems and/or Information Assurance (IA) Positions of TrustDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245767 in V2R10

V-245768CAT IIForeign National (FN) Administrative Controls - Written Procedures and Employee TrainingDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245768 in V2R10

V-245769CAT IIForeign National (FN) Administrative Controls - Procedures for Requests to Provide Foreign Nationals System AccessDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245769 in V2R10

V-245770CAT IIIForeign National (FN) Administrative Controls - Contact Officer AppointmentDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245770 in V2R10

V-245771CAT IIIInformation Assurance - System Security Operating Procedures (SOPs)Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245771 in V2R10

V-245772CAT IIInformation Assurance - COOP Plan and Testing (Not in Place for Information Technology Systems or Not Considered in the organizational Holistic Risk Assessment)Fix text, Discussion

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245772 in V2R10

V-245773CAT IIIInformation Assurance - COOP Plan or Testing (Incomplete)Check text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245773 in V2R10

V-245774CAT IIInformation Assurance - System Security Incidents (Identifying, Reporting, and Handling)Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245774 in V2R10

V-245776CAT IIInformation Assurance - System Training and Certification/ IA PersonnelDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245776 in V2R10

V-245777CAT IIInformation Assurance/Cybersecurity Training for System UsersDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245777 in V2R10

V-245788CAT IInformation Assurance - Network Connections - Physical Protection of Network Devices such as Routers, Switches and Hubs (Connected to SIPRNet or Other Classified Networks or Systems Being Inspected)Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245788 in V2R10

V-245789CAT IInformation Assurance - Network Connections - Wall Jack Security on Classified Networks (SIPRNet or other Inspected Classified Network or System) Where Port Authentication Using IEEE 802.1X IS NOT ImplementedDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245789 in V2R10

V-245790CAT IIInformation Assurance - Network Connections - Physical Protection of Unclassified (NIPRNet) Network Devices such as Routers, Switches and HubsDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245790 in V2R10

V-245792CAT IIIIndustrial Security - Contractor Visit Authorization Letters (VALs)Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245792 in V2R10

V-245793CAT IIIndustrial Security - Contract Guard VettingCheck text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245793 in V2R10

V-245794CAT IIInformation Security (INFOSEC) - Safe/Vault/Secure Room ManagementCheck text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245794 in V2R10

V-245795CAT IInformation Security (INFOSEC) - Vault/Secure Room Storage Standards - Door Combination Lock Meeting Federal Specification FF-L-2740Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245795 in V2R10

V-245796CAT IInformation Security (INFOSEC) - Secure Room Storage Standards - Door ConstructionDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245796 in V2R10

V-245797CAT IInformation Security (INFOSEC) - Secure Room Storage Standards Wall and Ceiling Structural Integrity (AKA: True Floor to True Ceiling Connection)Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245797 in V2R10

V-245798CAT IInformation Security (INFOSEC) - Vault/Secure Room Storage Standards - Openings in Perimeter Exceeding 96 Square InchesDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245798 in V2R10

V-245799CAT IInformation Security (INFOSEC) - Secure Room Storage Standards Windows - Accessible from the Ground Hardened Against Forced Entry and Shielded from Exterior Viewing of Classified Materials Contained within the Area.Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245799 in V2R10

V-245800CAT IInformation Security (INFOSEC) - Vault Storage/Construction StandardsDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245800 in V2R10

V-245801CAT IInformation Security (INFOSEC) - Secure Room Storage Standards - Intrusion Detection System (IDS)Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245801 in V2R10

V-245802CAT IInformation Security (INFOSEC) - Secure Room Storage Standards - Balanced Magnetic Switch (BMS) on Perimeter DoorsDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245802 in V2R10

V-245803CAT IInformation Security (INFOSEC) - Secure Room Storage Standards - Interior Motion DetectionDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245803 in V2R10

V-245804CAT IInformation Security (INFOSEC) - Secure Room Storage Standards - Four (4) Hour Random Checks in Lieu of Using Intrusion Detection System (IDS)Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245804 in V2R10

V-245805CAT IVault/Secure Room Storage Standards - IDS Transmission Line SecurityDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245805 in V2R10

V-245806CAT IVault/Secure Room Storage Standards - IDS Access/Secure Control Units Must be Located within the Secure Room SpaceDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245806 in V2R10

V-245807CAT IInformation Security (IS) - Continuous Operations Facility: Access Control Monitoring MethodsDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245807 in V2R10

V-245808CAT IVault/Secure Room Storage Standards - Access Control During Working Hours Using Visual Control OR Automated Entry Control System (AECS) with PIN / BiometricsDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245808 in V2R10

V-245809CAT IVault/Secure Room Storage Standards - Automated Entry Control System (AECS) and Intrusion Detection System (IDS) Head-End Equipment Protection: The physical location (room or area) containing AECS and IDS head-end equipment (server and/or work station/monitoring equipment) where authorization, personal identification or verification data is input, stored, or recorded and/or where system status/alarms are monitored must be physically protected.Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245809 in V2R10

V-245810CAT IIInformation Security (INFOSEC) - Secure Room Storage Standards - Structural Integrity ChecksCheck text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245810 in V2R10

V-245811CAT IIVault/Secure Room Storage Standards - IDS Performance VerificationDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245811 in V2R10

V-245812CAT IIVault/Secure Room Storage Standards - Masking of IDS Sensors Displayed at the Intrusion Detection System (IDS) Monitoring StationDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245812 in V2R10

V-245813CAT IIVault/Secure Room Storage Standards - IDS Alarm Monitoring Indicators, both audible and visual (Alarm Status) must be displayed for each sensor or alarmed zone at the monitoring station.Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245813 in V2R10

V-245814CAT IIVault/Secure Room Storage Standards - Intrusion Detection System (IDS) / Automated Entry Control System (AECS) Primary and Emergency Power SupplyDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245814 in V2R10

V-245815CAT IIVault/Secure Room Storage Standards - Intrusion Detection System and Automated Entry Control System (IDS/AECS) Component Tamper ProtectionDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245815 in V2R10

V-245816CAT IIVault/Secure Room Storage Standards - Primary IDS Monitoring Location Outside the Monitored SpaceDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245816 in V2R10

V-245817CAT IIVault/Secure Room Storage Standards - Automated Entry Control System (AECS) Records Maintenance, which includes documented procedures for granting and removal of access.Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245817 in V2R10

V-245818CAT IIVault/Secure Room Storage Standards - Automated Entry Control System (AECS) Transmission Line Security: AECS Transmission lines traversing an uncontrolled area (not within at least a Secret Controlled Access Area (CAA) ) shall use line supervision OR Electrical, mechanical, or electromechanical access control devices, which do not constitute an AECS that are used to control access during duty hours must have all electrical components, that traverse outside minimally a Secret Controlled Access Area (CAA), secured within conduit.Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245818 in V2R10

V-245819CAT IIVault/Secure Room Storage Standards - Automated Entry Control System (AECS) Door Locks: Electric Strikes and/or Magnetic Locking devices used in access control systems shall be heavy duty, industrial grade and be configured to fail secure in the event of a total loss of power (primary and backup).Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245819 in V2R10

V-245820CAT IIInformation Security (INFOSEC) - Secure Room Storage Standards - Perimeter Construction using Proper Permanent Construction Materials for True Ceiling, Walls and Floors.Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245820 in V2R10

V-245821CAT IIIVault/Secure Room Storage Standards - Automated Entry Control System (AECS) Keypad Device Protection: Keypad devices designed or installed in a manner that an unauthorized person in the immediate vicinity cannot observe the selection of input numbers.Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245821 in V2R10

V-245822CAT IIMarking Classified - Equipment, Documents or Media: In a classified operating environment, all unclassified items must be marked in addition to all classified items.Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245822 in V2R10

V-245823CAT IIIMarking Classified - Local or Enclave Classified Marking Procedures must be developed to ensure employees are familiar with appropriate organization Security Classification Guides (SCG), how to obtain guidance for marking classified documents, media and equipment, and where associated forms, classified cover sheets, labels, stamps, wrapping material for classified shipment, etc. can be obtained.Check text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245823 in V2R10

V-245824CAT IIIClassified Working Papers are properly marked, destroyed when no longer needed, or treated as a finished document after 180 days.Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245824 in V2R10

V-245825CAT IStorage/Handling of Classified Documents, Media, Equipment - must be under continuous personal protection and control of an authorized (cleared) individual OR guarded or stored in an approved locked security container (safe), vault, secure room, collateral classified open storage area or SCIF.Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245825 in V2R10

V-245826CAT IIINon-Disclosure Agreement - Standard Form 312: no person may have access to classified information unless that person has a security clearance in accordance with DODM 5200.02 and has signed a Standard Form (SF) 312, Classified Information Non-Disclosure Agreement (NDA), and access is essential to the accomplishment of a lawful and authorized Government function (i.e., has a need to know).Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245826 in V2R10

V-245827CAT IIIHandling of Classified Documents, Media, Equipment - Written Procedures and Training for when classified material/equipment is removed from a security container and/or secure room.Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245827 in V2R10

V-245828CAT IIIHandling of Classified - Use of Cover Sheets on Documents Removed from Secure StorageDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245828 in V2R10

V-245829CAT IClassified Monitors/Displays (Physical Control of Classified Monitors From Unauthorized Viewing)Check text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245829 in V2R10

V-245830CAT IMonitor Screens - Disable Access by CAC or Token Removal, or Lock Computer via Ctrl/Alt/DelDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245830 in V2R10

V-245831CAT IIIClassified Monitors/Displays (Procedures for Obscuration of Classified Monitors) - protection from uncleared persons or those without a need-to-know.Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245831 in V2R10

V-245832CAT IIEnd-of-Day Checks - Organizations that process or store classified information must establish a system of security checks at the close of each duty and/or business day to ensure that any area where classified information is used or stored is secure. SF 701, Activity Security Checklist, shall be used to record such checks.Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245832 in V2R10

V-245833CAT IClassified Reproduction - SIPRNet Connected Classified Multi-Functional Devices (MFD) located in Space Not Approved for Collateral Classified Open Storage.Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245833 in V2R10

V-245834CAT IIClassified Reproduction - Following guidance for System to Media Transfer of Data from systems connected specifically to the SIPRNet In-Accordance-With (IAW) US CYBERCOM CTO 10-133A.Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245834 in V2R10

V-245835CAT IIIClassified Reproduction - Written Procedures for SIPRNet Connected Classified Multi-Functional Devices (MFD) located in Space Not Approved for Collateral Classified Open Storage. NOTE: This vulnerability concerns only PROCEDURES for the reproduction (printing, copying, scanning, faxing) of classified documents on Multi-Functional Devices (MFD) connected to the DOWIN.Title, Check text, Fix text, Discussion

Title

Too long to include here — see it in STIG Compare.

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245835 in V2R10

V-245836CAT IDestruction of Classified Documents Printed from the SIPRNet Using Approved Devices on NSA Evaluated Products Lists (EPL).Discussion

Discussion

Too long to include here — see it in STIG Compare.

V-245836 in V2R10

V-245837CAT IClassified Material Destruction - Improper Disposal of Automated Information System (AIS) Hard Drives and Storage MediaCheck text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245837 in V2R10

V-245838CAT IIClassified Destruction - Hard Drive and Storage Media Sanitization Devices and Plans are not Available for disposal of Automated Information System (AIS) Equipment On-HandCheck text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245838 in V2R10

V-245839CAT IIIDestruction of Classified and Unclassified Documents, Equipment and Media - Availability of Local Policy and ProceduresDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245839 in V2R10

V-245840CAT IIClassified Emergency Destruction Plans - Develop and Make AvailableDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245840 in V2R10

V-245841CAT IISecurity Incident/Spillage - Lack of Procedures or Training for Handling and ReportingCheck text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245841 in V2R10

V-245842CAT IIClassification Guides Must be Available for Programs and Systems for an Organization or SiteDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245842 in V2R10

V-245843CAT IIControlled Unclassified Information (CUI) - Employee Education and TrainingCheck text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245843 in V2R10

V-245844CAT IIControlled Unclassified Information - Document, Hard Drive and Media DisposalCheck text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245844 in V2R10

V-245846CAT IIControlled Unclassified Information - Encryption of Data at RestCheck text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245846 in V2R10

V-245849CAT IIIControlled Unclassified Information (CUI) - Local Policy and ProcedureCheck text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245849 in V2R10

V-245850CAT IIIControlled Unclassified Information - Marking/Labeling Media within Unclassified Environments (Not Mixed with Classified)Check text, Fix text

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

V-245850 in V2R10

V-245851CAT IIIClassified Annual ReviewDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245851 in V2R10

V-245852CAT IIIPosition of Trust - Knowledge of Responsibility to Self Report Derogatory InformationDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245852 in V2R10

V-245853CAT IIIPosition of Trust - Local Policy Covering Employee Personal Standards of Conduct and ResponsibilitiesDiscussion

Discussion

Too long to include here — see it in STIG Compare.

V-245853 in V2R10

V-245854CAT IIIPosition of Trust - Training Covering Employee Standards of Conduct and Personal ResponsibilitiesCheck text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245854 in V2R10

V-245856CAT IIValidation Procedures for Security Clearance Issuance (Classified Systems and/or Physical Access Granted)Check text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245856 in V2R10

V-245863CAT IIIPhysical Security Program - Physical Security Plan (PSP) and/or Systems Security Plan (SSP) Development and Implementation with Consideration/Focus on Protection of Information System Assets in the Physical EnvironmentCheck text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245863 in V2R10

V-245864CAT IIRisk Assessment -Holistic Review (site/environment/information systems)Check text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245864 in V2R10

V-245867CAT IISecurity-in-Depth (AKA: Defense-in-Depth) - Minimum Physical Barriers and Access Control Measures for Facilities or Buildings Containing DOWIN (SIPRNet/NIPRNet) Connected Assets.Title, Check text, Fix text, Discussion

Title

Security-in-Depth (AKA: Defense-in-Depth) - Minimum Physical Barriers and Access Control Measures for Facilities or Buildings Containing DODINDOWIN (SIPRNet/NIPRNet) Connected Assets.

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245867 in V2R10

V-245868CAT IIVisitor Control - To Facility or Organization with Information System Assets Connected to the DISNCheck text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245868 in V2R10

V-245873CAT IIICounter-Intelligence Program - Training, Procedures and Incident ReportingCheck text, Fix text, Discussion

Check text

Too long to include here — see it in STIG Compare.

Fix text

Too long to include here — see it in STIG Compare.

Discussion

Too long to include here — see it in STIG Compare.

V-245873 in V2R10

Some long before-and-after texts are left out above to keep this page small; STIG Compare shows all of them.

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V2R10 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.