Skip to content

III - Administrative Sensitive

Rules and Groups employed by this XCCDF Profile

  • IA-03.02.01

    <GroupDescription></GroupDescription>
    Group
  • Information Assurance - System Security Incidents (Identifying, Reporting, and Handling)

    &lt;VulnDiscussion&gt;Failure to recognize, investigate and report information systems security incidents could result in the loss of confidentiali...
    Rule Medium Severity
  • IA-05.02.01

    <GroupDescription></GroupDescription>
    Group
  • Information Assurance - System Access Control Records (DD Form 2875 or equivalent)

    &lt;VulnDiscussion&gt;If accurate records of authorized users are not maintained, then unauthorized personnel could have access to the system. Fail...
    Rule Medium Severity
  • IA-06.02.01

    <GroupDescription></GroupDescription>
    Group
  • Information Assurance - System Training and Certification/ IA Personnel

    &lt;VulnDiscussion&gt;Improperly trained personnel can cause serious system-wide/network-wide problems that render a system/network unstable. REFE...
    Rule Medium Severity
  • IA-06.02.02

    <GroupDescription></GroupDescription>
    Group
  • Information Assurance/Cybersecurity Training for System Users

    &lt;VulnDiscussion&gt;Improperly trained personnel can cause serious system-wide/network-wide problems that render a system/network unstable. REFE...
    Rule Medium Severity
  • IA-07.02.01

    <GroupDescription></GroupDescription>
    Group
  • Information Assurance - Accreditation Documentation

    &lt;VulnDiscussion&gt;Failure to provide the proper documentation can lead to a system connecting without all proper safeguards in place, creating ...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules