Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Controlled Unclassified Information - Posting Only on Web-Sites with Appropriate Encryption; not on Publicly Accessible Web-Sites.
Description
Discussion Text
Failure to handle CUI in an approved manner can result in the loss or compromise of sensitive information.
REFERENCES:
Executive Order 13556, Controlled Unclassified Information (CUI)
The Information Security Oversight Office (ISOO): https://www.archives.gov/cui
DODI 8170.01, Online Information Management and Electronic Messaging.
DOD 5400.7-R, DOD Freedom of Information Act Program, Sep 98.
DOD 5400-11-R, Department of Defense Privacy Program, 14 May 07.
DODD 5230.09, 22 Aug 08, Clearance of DOD Information for Public Release
DODI 5230.29, 8 Jan 09, Security and Policy Review of DOD Information for Public Release.
PL 104-191, 21 Aug 96, Health Insurance Portability and Accountability Act of 1996
NIST FIPS 140-2, Security Requirements for Cryptographic Modules
DODI 8520.2, "Public Key Infrastructure (PKI) and Public Key Enabling (PKE)"
CJCSI 6510.01F, INFORMATION ASSURANCE (IA) AND SUPPORT TO COMPUTER NETWORK DEFENSE (CND); Enclosure A, paragraph 7.a. and Enclosure C, paragraph 26.i.
NIST Special Publication 800-53 (SP 800-53), Controls: AC-14, AC-17, IA-8 and SC-7.
DOD Manual 5200.01, Volume 3, 24 February 2012, SUBJECT: DOD Information Security Program: Protection of Classified Information; Enclosure 7, paragraph 13.f..
DODI 5200.48 Controlled Unclassified Information (CUI)
32 CFR 117 and 32 CFR 2001 and 2003 as well as DOD Manual 5220.32 Volume 1
REFERENCES:
Executive Order 13556, Controlled Unclassified Information (CUI)
The Information Security Oversight Office (ISOO): https://www.archives.gov/cui
DODI 8170.01, Online Information Management and Electronic Messaging.
DOD 5400.7-R, DOD Freedom of Information Act Program, Sep 98.
DOD 5400-11-R, Department of Defense Privacy Program, 14 May 07.
DODD 5230.09, 22 Aug 08, Clearance of DOD Information for Public Release
DODI 5230.29, 8 Jan 09, Security and Policy Review of DOD Information for Public Release.
PL 104-191, 21 Aug 96, Health Insurance Portability and Accountability Act of 1996
NIST FIPS 140-2, Security Requirements for Cryptographic Modules
DODI 8520.2, "Public Key Infrastructure (PKI) and Public Key Enabling (PKE)"
CJCSI 6510.01F, INFORMATION ASSURANCE (IA) AND SUPPORT TO COMPUTER NETWORK DEFENSE (CND); Enclosure A, paragraph 7.a. and Enclosure C, paragraph 26.i.
NIST Special Publication 800-53 (SP 800-53), Controls: AC-14, AC-17, IA-8 and SC-7.
DOD Manual 5200.01, Volume 3, 24 February 2012, SUBJECT: DOD Information Security Program: Protection of Classified Information; Enclosure 7, paragraph 13.f..
DODI 5200.48 Controlled Unclassified Information (CUI)
32 CFR 117 and 32 CFR 2001 and 2003 as well as DOD Manual 5220.32 Volume 1
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.