Skip to content

Traditional Security Checklist

Rules, Groups, and Values defined within the XCCDF Benchmark

  • CS-06.02.02

    <GroupDescription></GroupDescription>
    Group
  • Protected Distribution System (PDS) Monitoring - Reporting Incidents

    &lt;VulnDiscussion&gt;A PDS that is not inspected, monitored and maintained as required could result in undetected access, sabotage or tampering of...
    Rule Medium Severity
  • CS-06.03.01

    <GroupDescription></GroupDescription>
    Group
  • Protected Distribution System (PDS) Monitoring - Technical Inspections

    &lt;VulnDiscussion&gt;A PDS that is not inspected, monitored and maintained as required could result in undetected access, sabotage or tampering of...
    Rule Low Severity
  • CS-06.03.02

    <GroupDescription></GroupDescription>
    Group
  • Protected Distribution System (PDS) Monitoring - Initial Inspection

    &lt;VulnDiscussion&gt;A PDS that is not inspected, monitored and maintained as required could result in undetected access, sabotage or tampering of...
    Rule Low Severity
  • EC-01.02.01

    <GroupDescription></GroupDescription>
    Group
  • Environmental IA Controls - Emergency Power Shut-Off (EPO)

    &lt;VulnDiscussion&gt;A lack of an emergency shut-off switch or a master power switch for electricity to IT equipment could cause damage to the equ...
    Rule Medium Severity
  • EC-02.02.01

    <GroupDescription></GroupDescription>
    Group
  • Environmental IA Controls - Emergency Lighting and Exits - Properly Installed

    &lt;VulnDiscussion&gt;Lack of automatic emergency lighting and exits can cause injury and/or death to employees and emergency responders. Lack of a...
    Rule Medium Severity
  • EC-02.03.01

    <GroupDescription></GroupDescription>
    Group
  • Environmental IA Controls - Emergency Lighting and Exits - Documentation and Testing

    &lt;VulnDiscussion&gt;Lack of automatic emergency lighting can cause injury and/or death to employees and emergency responders. Lack of automatic e...
    Rule Low Severity
  • EC-03.03.01

    <GroupDescription></GroupDescription>
    Group
  • Environmental IA Controls - Voltage Control (power)

    &lt;VulnDiscussion&gt;Failure to use automatic voltage control can result in damage to the IT equipment creating a service outage. REFERENCES: Do...
    Rule Low Severity
  • EC-03.02.02

    <GroupDescription></GroupDescription>
    Group
  • Environmental IA Controls - Emergency Power

    &lt;VulnDiscussion&gt;Failure to have alternative power sources available can result in significant impact to mission accomplishment and informatio...
    Rule Medium Severity
  • EC-04.03.01

    <GroupDescription></GroupDescription>
    Group
  • Environmental IA Controls - Training

    &lt;VulnDiscussion&gt;If employees have not received training on the environmental controls they will not be able to respond to a fluctuation of en...
    Rule Low Severity
  • EC-05.03.01

    <GroupDescription></GroupDescription>
    Group
  • Environmental IA Controls - Temperature

    &lt;VulnDiscussion&gt;Lack of temperature controls can lead to fluctuations in temperature which could be potentially harmful to personnel or equip...
    Rule Low Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules