Windows 8/8.1 Security Technical Implementation Guide

The Windows 8/8.1 Security Technical Implementation Guide (V1 R23) has 378 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

378STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R23

CurrentPublished Wed Jun 17 2020

Unencrypted remote access to system services must not be permitted.

Windows 8/8.1 Security Technical Implementation Guide

Assessment Title

Rule Text

Unencrypted remote access to system services must not be permitted.

Description

Discussion Text

Unencrypted access to system services may permit user identification and passwords that are being transmitted in clear text to be intercepted. This could provide an intruder access to the network.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-2908

Rule

SV-48066r2_rule

Severity

high

Rule Version

WN08-00-000007

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify encryption is required for remote access.

If userid and password information are not encrypted, this is a finding.

If administrator data is not encrypted, this is a finding.

If user data coming from or going outside the enclave is not encrypted, this is a finding.

Implementation Procedure

Fix Text

Require encryption for remote access.

Encryption of userid and password information is always required.

Encryption of administrator data is always required.

Encryption of user data coming from or going outside the network firewall is required.

Encryption of the user data inside the network firewall is also highly recommended.

STIG check 204 of 378 in the Windows 8/8.1 STIG checklist

← Previous · V-28504Windows must be prevented from sending an error report when a device driver requests additional software during installation.Next · V-32272 →The DoD Root CA certificates must be installed in the Trusted Root Store.