Skip to content

Traditional Security Checklist

Rules, Groups, and Values defined within the XCCDF Benchmark

  • CS-01.03.01

    <GroupDescription></GroupDescription>
    Group
  • COMSEC Account Management - Appointment of Responsible Person

    &lt;VulnDiscussion&gt;Lack of formal designation of an individual to be responsible for COMSEC items could result in mismanagement, loss or even co...
    Rule Low Severity
  • CS-01.03.02

    <GroupDescription></GroupDescription>
    Group
  • COMSEC Account Management - Program Management and Standards Compliance

    &lt;VulnDiscussion&gt;Recipients of NSA or Service COMSEC accounts are responsible to properly maintain the accounts. Procedures covering security,...
    Rule Low Severity
  • CS-02.02.01

    <GroupDescription></GroupDescription>
    Group
  • COMSEC Training - COMSEC Custodian or Hand Receipt Holder

    &lt;VulnDiscussion&gt;Lack of appropriate training for managers of COMSEC accounts could result in the mismanagement of COMSEC records and inadequa...
    Rule Medium Severity
  • CS-02.02.02

    <GroupDescription></GroupDescription>
    Group
  • COMSEC Training - COMSEC User

    &lt;VulnDiscussion&gt;Failure to properly brief COMSEC users could result in the loss of cryptologic devices or key, or the compromise of classifie...
    Rule Medium Severity
  • CS-03.01.01

    <GroupDescription></GroupDescription>
    Group
  • Classified Transmission - Electronic Means using Cryptographic System Authorized by the Director, NSA

    &lt;VulnDiscussion&gt;Failure to properly encrypt classified data in transit can lead to the loss or compromise of classified or sensitive informat...
    Rule High Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules