Skip to content

Traditional Security Checklist

Rules, Groups, and Values defined within the XCCDF Benchmark

  • EC-06.03.01

    <GroupDescription></GroupDescription>
    Group
  • Environmental IA Controls - Humidity

    &lt;VulnDiscussion&gt;Fluctuations in humidity can be potentially harmful to personnel or equipment causing the loss of services or productivity. ...
    Rule Low Severity
  • EC-07.03.01

    <GroupDescription></GroupDescription>
    Group
  • Environmental IA Controls - Fire Inspections/ Discrepancies

    &lt;VulnDiscussion&gt;Failure to conduct fire inspections and correct any discrepancies could result in hazardous situations leading to a possible ...
    Rule Low Severity
  • EC-08.03.01

    <GroupDescription></GroupDescription>
    Group
  • Environmental IA Controls - Fire Detection and Suppression

    &lt;VulnDiscussion&gt;Failure to provide adequate fire detection and suppression could result in the loss of or damage to data, equipment, faciliti...
    Rule Low Severity
  • EM-01.02.01

    <GroupDescription></GroupDescription>
    Group
  • TEMPEST Countermeasures

    &lt;VulnDiscussion&gt;Failure to implement required TEMPEST countermeasures could leave the system(s) vulnerable to a TEMPEST attack. REFERENCES: ...
    Rule Medium Severity
  • EM-02.02.01

    <GroupDescription></GroupDescription>
    Group
  • TEMPEST - Red/Black separation (Processors)

    &lt;VulnDiscussion&gt;Failure to maintain proper separation could result in detectable emanations of classified information. REFERENCES: ...
    Rule Medium Severity
  • EM-03.02.01

    <GroupDescription></GroupDescription>
    Group
  • TEMPEST - Red/Black Separation (Cables)

    &lt;VulnDiscussion&gt;Failure to maintain proper separation could result in detectable emanations of classified information. REFERENCES: ...
    Rule Medium Severity
  • FN-01.02.01

    <GroupDescription></GroupDescription>
    Group
  • Foreign National System Access - Identification as FN in E-mail Address

    &lt;VulnDiscussion&gt;Unauthorized access by foreign nationals to Information Systems can result in, among other things, security incidents, compro...
    Rule Medium Severity
  • FN-01.03.01

    <GroupDescription></GroupDescription>
    Group
  • Foreign National System Access - Local Access Control Procedures

    &lt;VulnDiscussion&gt;Unauthorized access by foreign nationals to Information Systems can result in, among other things, security incidents, compro...
    Rule Low Severity
  • FN-02.01.01

    <GroupDescription></GroupDescription>
    Group
  • Foreign National (FN) Systems Access - Local Nationals Overseas System Access - (SIPRNet or Other Classified System or Classified Network being Reviewed)

    &lt;VulnDiscussion&gt;Failure to subject foreign nationals to background checks could result in the loss or compromise of classified or sensitive i...
    Rule High Severity
  • FN-02.02.01

    <GroupDescription></GroupDescription>
    Group
  • Foreign National (FN) Systems Access - Local Nationals Overseas System Access - (NIPRNet User)

    &lt;VulnDiscussion&gt;Failure to subject foreign nationals to background checks could result in the loss or compromise of classified or sensitive i...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules