V-30369
SWLAN must be rekeyed at least every 90 days.
Finding ID
WIR0231
Rule ID
SV-40029r1_rule
Severity
Cat I
CCE
(None)
Group Title
SWLAN rekeying
CCI
(None)
Target Key
(None)
Documentable
No
Discussion
The longer a key remains in use, the more likely it will be compromised. If an adversary can compromise an SWLAN key, then it can obtain classified information.
Fix Text
Write and implement rekeying procedures that specify the keys must be changed at least every 90 days.
Check Content
Detailed Policy Requirements: SWLAN system will be rekeyed at least every 90 days. Check Procedures: Interview IAO and obtain the site’s procedures for rekeying the WLAN. Mark a finding if the procedures do not exist or they do not include a requirement to rekey at least every 90 days.
IA Controls
ECWN-1