Rotate your device back to portrait to use STIG Vault.

Home
Dashboard
Search
STIG Repository
STIG Compare
SCAP Repository
SCAP Compare
CCIs
Guides
Contact

Appearance

Palette

Video Services Policy STIG

The Video Services Policy STIG (V1 R12) has 83 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

83STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R12

CurrentPublished Wed Jul 27 2022

VTU encryption indicator is not enabled.

Video Services Policy STIG

Assessment Title

Rule Text

Description

Discussion Text

In support of the need for encryption and the need for the VTU user to be aware that in fact his/her conference session is being encrypted, the VTU must display an indicator that encryption is indeed occurring.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-17685

Rule

SV-18859r1_rule

Severity

medium

Rule Version

RTS-VTC 1250.00

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

[IP][ISDN]; Interview the IAO to validate compliance with the following requirement:

Ensure all VTU’s under IAO’s control display a visual indicator that encryption is in fact taking place.

Note: During APL testing, this is a finding in the event this requirement is not supported by the CODEC i.e., an on screen visual indicator displaying that encryption is indeed occurring.

Note: In the event encryption is provided by external devices (not the CODEC), an external indicator meets this requirement in place of the on-screen indicator.

Implementation Procedure

Fix Text

[IP][ISDN]; Perform the following tasks:

Implement VTU CODECs that provide an on screen indicator that encryption is occurring and active.
OR
If the encryption is provided by external devices (not the CODEC), implement an external indicator to display encryption status in place of an on-screen indicator provided by the CODEC.

STIG check 24 of 83 in the Video Services Policy STIG checklist

← Previous · V-17684The VTU must use FIPS 140-2 validated encryption module.Next · V-17686 →Deficient SOP or enforcement for user validation that encryption is on when required