Skip to content

III - Administrative Classified

Rules and Groups employed by this XCCDF Profile

  • EC-08.03.01

    <GroupDescription></GroupDescription>
    Group
  • Environmental IA Controls - Fire Detection and Suppression

    &lt;VulnDiscussion&gt;Failure to provide adequate fire detection and suppression could result in the loss of or damage to data, equipment, faciliti...
    Rule Low Severity
  • EM-01.02.01

    <GroupDescription></GroupDescription>
    Group
  • TEMPEST Countermeasures

    &lt;VulnDiscussion&gt;Failure to implement required TEMPEST countermeasures could leave the system(s) vulnerable to a TEMPEST attack. REFERENCES: ...
    Rule Medium Severity
  • EM-02.02.01

    <GroupDescription></GroupDescription>
    Group
  • TEMPEST - Red/Black separation (Processors)

    &lt;VulnDiscussion&gt;Failure to maintain proper separation could result in detectable emanations of classified information. REFERENCES: ...
    Rule Medium Severity
  • EM-03.02.01

    <GroupDescription></GroupDescription>
    Group
  • TEMPEST - Red/Black Separation (Cables)

    &lt;VulnDiscussion&gt;Failure to maintain proper separation could result in detectable emanations of classified information. REFERENCES: ...
    Rule Medium Severity
  • FN-01.02.01

    <GroupDescription></GroupDescription>
    Group
  • Foreign National System Access - Identification as FN in E-mail Address

    &lt;VulnDiscussion&gt;Unauthorized access by foreign nationals to Information Systems can result in, among other things, security incidents, compro...
    Rule Medium Severity
  • FN-01.03.01

    <GroupDescription></GroupDescription>
    Group
  • Foreign National System Access - Local Access Control Procedures

    &lt;VulnDiscussion&gt;Unauthorized access by foreign nationals to Information Systems can result in, among other things, security incidents, compro...
    Rule Low Severity
  • FN-02.01.01

    <GroupDescription></GroupDescription>
    Group
  • Foreign National (FN) Systems Access - Local Nationals Overseas System Access - (SIPRNet or Other Classified System or Classified Network being Reviewed)

    &lt;VulnDiscussion&gt;Failure to subject foreign nationals to background checks could result in the loss or compromise of classified or sensitive i...
    Rule High Severity
  • FN-02.02.01

    <GroupDescription></GroupDescription>
    Group
  • Foreign National (FN) Systems Access - Local Nationals Overseas System Access - (NIPRNet User)

    &lt;VulnDiscussion&gt;Failure to subject foreign nationals to background checks could result in the loss or compromise of classified or sensitive i...
    Rule Medium Severity
  • FN-02.02.02

    <GroupDescription></GroupDescription>
    Group
  • Foreign National (FN) Systems Access - Delegation of Disclosure Authority Letter (DDL)

    &lt;VulnDiscussion&gt;Unauthorized access by foreign nationals to Information Systems can result in, among other things, security incidents, compro...
    Rule Medium Severity
  • FN-03.01.01

    <GroupDescription></GroupDescription>
    Group
  • Foreign National System Access - FN or Immigrant Aliens (not representing a foreign government or entity) System Access - Limited Access Authorization (LAA)

    &lt;VulnDiscussion&gt;Failure to verify citizenship and proper authorization for access to either sensitive or classified information could enable ...
    Rule High Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules