Rule version NET1827 · STIG v10 · 2024-08-02
Any exception to use SIPRNet must be documented in an update to the enclave's accreditation package and an Authority to Connect (ATC) or Interim ATC amending the connection approval received prior to implementation.
Review SIPRNet accreditation package and an Interim Authority to Connect/Authority to Connect (IATC/ATC) amending the connection approval received.
If C2 and non-C2 exceptions are not documented, this is a finding.
Document all SIPRNet connections.