V-18582
A Secure WLAN (SWLAN) connected to the SIPRNet must have a SIPRNet connection approval package must be on file with the Classified Connection Approval Office (CCAO).
Finding ID
WIR0215
Rule ID
SV-20126r1_rule
Severity
Cat I
CCE
(None)
Group Title
SWLAN CCAO Approval
CCI
(None)
Target Key
(None)
Documentable
No
Discussion
The CCAO approval process provides assurance that the SWLAN use is appropriate and does not introduce unmitigated risks into the SIPRNET.
Fix Text
Disable or remove the non-compliant SWLAN until the site has all required approvals for operation.
Check Content
Review documentation. - Verify the SWLAN system SCAO approval documentation exists and has been approved and has a SIPRNet or NIPRNet Interim Approval to Operate (IATO) or Approval to Operate (ATO) in GIAP database. - Verify the SWLAN system is included in the SSAA/SSP and is signed by the DAA. Mark as a finding if requirements are not met.
IA Controls
ECWN-1