Intrusion Detection System (IDS) Installation and Maintenance Personnel - Suitability Checks
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-245862 | PE-08.02.02 | PE-08.02.02 | SV-245862r1136809_rule | 2025-12-04 | 2 |
Description
Failure to subject personnel who install and maintain the IDS alarms to a trustworthiness determination can result in the inadvertent or deliberate unauthorized exposure to or release of classified material.
REFERENCES:
DOD Manual 5200.01, Volume 3, 24 February 2012, SUBJECT: DOD Information Security Program: Protection of Classified Information
Appendix to Enclosure 3, para 2.f.(1)&(2)
32 CFR 117 and 32 CFR 2001 and 2003 as well as DOD Manual 5220.32 Volume 1
NIST Special Publication 800-53 (SP 800-53)
Control: PS-2 and PS-3
CJCSI 6510.01F, INFORMATION ASSURANCE (IA) AND SUPPORT TO COMPUTER NETWORK DEFENSE (CND), 9 February 2011
Encl A para 7.f. and Encl D Reference q
Legacy DOD 5200.2-R; Personnel Security Program
Paragraph C3.1.2.1.2.5.
Current DOD Manual 5200.02, Procedures for the DOD Personnel Security Program (PSP) 3 April 2017, Paragraph 4.1.a.(3)
ℹ️ Check
Check physical IDS - protecting vaults, secure rooms or spaces containing SIPRNet assets - to ensure that installation and maintenance is accomplished by U.S. citizens who have been subjected to a trustworthiness determination in accordance with DOD Manual 5200.02. Minimally installation and maintenance personnel must be subjects of a successfully adjudicated Tier 3 investigation or an older NACLAC and ANACI that is still within scope.
TACTICAL ENVIRONMENT APPLICABILITY: Apply to fixed tactical environments where IDS is installed to protect SIPRNet and other DODIN (AKA: DISN) connected assets.
✔️ Fix
Ensure that installation and maintenance of physical IDS - protecting vaults, secure rooms or spaces containing SIPRNet assets - is accomplished by U.S. citizens who have been subjected to a trustworthiness determination in accordance with DOD Manual 5200.02. Minimally installation and maintenance personnel must be subjects of a successfully adjudicated Tier 3 investigation or an older NACLAC and ANACI that is still within scope.