Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Controlled Unclassified Information - Encryption of Data at Rest
Description
Discussion Text
Failure to handle CUI in an approved manner can result in the loss or compromise of sensitive information.
REFERENCES:
Executive Order 13556, Controlled Unclassified Information (CUI)
The Information Security Oversight Office (ISOO): https://www.archives.gov/cui
DOD CIO Memorandum, Encryption of Sensitive Unclassified Data at Rest on Mobile Computing Devices and Removable Storage Media, 3 July 2007
NIST FIPS 140-2, Security Requirements for Cryptographic Modules
NSTISSI No. 11, National Policy Governing the Acquisition of Information Assurance (IA) and IA-Enabled Information Technology (IT) Products
CJCSI 6510.01F, INFORMATION ASSURANCE (IA) AND SUPPORT TO COMPUTER NETWORK DEFENSE (CND); Enclosure A, paragraphs 6.b., 13.b.(2), 13.b.(3) and Enclosure C, paragraphs 21.f. and 21.g.
NIST Special Publication 800-53 (SP 800-53), Controls: MP-5, PL-2 and SC-28.
DOD Manual 5200.01, Volume 3, 24 February 2012, SUBJECT: DOD Information Security Program: Protection of Classified Information; Enclosure 7, paragraphs 8. and 9.a.
DOD Instruction 8420.01, Commercial Wireless Local Area Network (WLAN) Devices, Systems, and Technologies, 3 November 2017, paragraphs 1.2.b., 1.2.h., 3.2.a., 3.2.a.(3), and 3.8.d.
NSA, Commercial Solutions for Classified Data at Rest Capability Package, current edition
REFERENCES:
Executive Order 13556, Controlled Unclassified Information (CUI)
The Information Security Oversight Office (ISOO): https://www.archives.gov/cui
DOD CIO Memorandum, Encryption of Sensitive Unclassified Data at Rest on Mobile Computing Devices and Removable Storage Media, 3 July 2007
NIST FIPS 140-2, Security Requirements for Cryptographic Modules
NSTISSI No. 11, National Policy Governing the Acquisition of Information Assurance (IA) and IA-Enabled Information Technology (IT) Products
CJCSI 6510.01F, INFORMATION ASSURANCE (IA) AND SUPPORT TO COMPUTER NETWORK DEFENSE (CND); Enclosure A, paragraphs 6.b., 13.b.(2), 13.b.(3) and Enclosure C, paragraphs 21.f. and 21.g.
NIST Special Publication 800-53 (SP 800-53), Controls: MP-5, PL-2 and SC-28.
DOD Manual 5200.01, Volume 3, 24 February 2012, SUBJECT: DOD Information Security Program: Protection of Classified Information; Enclosure 7, paragraphs 8. and 9.a.
DOD Instruction 8420.01, Commercial Wireless Local Area Network (WLAN) Devices, Systems, and Technologies, 3 November 2017, paragraphs 1.2.b., 1.2.h., 3.2.a., 3.2.a.(3), and 3.8.d.
NSA, Commercial Solutions for Classified Data at Rest Capability Package, current edition
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.