II - Mission Support Classified
Rules and Groups employed by this XCCDF Profile
-
MFDs with print, copy, scan, or fax capabilities must be prohibited on classified networks without the approval of the DAA.
MFDs with print, copy, scan, or fax capabilities, if compromised, could lead to the compromise of classified data or the compromise of the network. The IAO will ensure MFDs with copy, scan, or fax...Rule High Severity -
MFD Clearing Disk Space Scan to Disk
Group -
A MFD device, with scan to hard disk functionality used, is not configured to clear the hard disk between jobs.
If the MFD is compromised the un-cleared, previously used, space on the hard disk drive can be read which can lead to a compromise of sensitive data. The SA will ensure the device is configured to ...Rule Medium Severity -
MFD Scan Discretionary Access Control
Group -
Scan to a file share is enabled but the file shares do not have the appropriate discretionary access control list in place.
Without appropriate discretionary access controls unauthorized individuals may read the scanned data. This can lead to a compromise of sensitive data. The SA will ensure file shares have the appro...Rule Low Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Capacity
Modules