Skip to content

The changes to the application must be assessed for IA and accreditation impact prior to implementation.

An XCCDF Rule

Description

<VulnDiscussion>When changes are made to an application, either in the code or in the configuration of underlying components such as the OS or the web or application server, there is the potential for security vulnerabilities to be opened up on the system. IA assessment of proposed changes is necessary to verify security integrity is maintained within the application.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>

ID
SV-222651r961863_rule
Severity
Medium
References
Updated



Remediation - Manual Procedure

Review IA impact to the system prior to implementing changes.