Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Physical Penetration Testing - of Facilities or Buildings Containing Information Systems (IS) Connected to the DISN
Description
Discussion Text
Failure to periodically test facility/building security where Information Systems (IS) connected to the DISN are present could lead to the unauthorized access of an individual into the facility with nefarious intentions to affect the Confidentiality, Integrity or Assurance of data or hardware on the IS.
REFERENCES:
DOD 5200.8-R Physical Security Program
Chapter 2, para C2.1.3.2. C2.1.3.4. and C2.2.4.
DOD Manual 5200.08 Volume 3, Physical Security Program: Access to DOD Installations, 2 January 2019
32 CFR 117 and 32 CFR 2001 and 2003 as well as DOD Manual 5220.32 Volume 1
NIST Special Publication 800-53 (SP 800-53)
Controls: CA-2, CA-8 and PE-3(6) and PE-6
CJCSI 6510.01F, INFORMATION ASSURANCE (IA) AND SUPPORT TO COMPUTER NETWORK DEFENSE (CND), 9 February 2011
Encl A, para 8.b., Encl C paragraphs 6.b. 12.a. 34.
DODI 8500.01, March 14, 2014, DOD CIO, SUBJECT: Cybersecurity
Encl 2, para 13.s. and Encl 3, paragraphs 3.b. & 5.c.
REFERENCES:
DOD 5200.8-R Physical Security Program
Chapter 2, para C2.1.3.2. C2.1.3.4. and C2.2.4.
DOD Manual 5200.08 Volume 3, Physical Security Program: Access to DOD Installations, 2 January 2019
32 CFR 117 and 32 CFR 2001 and 2003 as well as DOD Manual 5220.32 Volume 1
NIST Special Publication 800-53 (SP 800-53)
Controls: CA-2, CA-8 and PE-3(6) and PE-6
CJCSI 6510.01F, INFORMATION ASSURANCE (IA) AND SUPPORT TO COMPUTER NETWORK DEFENSE (CND), 9 February 2011
Encl A, para 8.b., Encl C paragraphs 6.b. 12.a. 34.
DODI 8500.01, March 14, 2014, DOD CIO, SUBJECT: Cybersecurity
Encl 2, para 13.s. and Encl 3, paragraphs 3.b. & 5.c.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.