Applications must provide automated support for the management of distributed security testing.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-35697	SRG-APP-000263-MAPP-NA	SV-46984r1_rule		Medium

Description
The need to verify security functionality applies to all security functions. For those security functions that are not able to execute automated self-tests the organization either implements compensating security controls or explicitly accepts the risk of not performing the verification as required. Information system transitional states include: startup, restart, shutdown, and abort. Rationale for non-applicability: The MDM SRG addresses automated support for the management of distributed security testing.

Description

The need to verify security functionality applies to all security functions. For those security functions that are not able to execute automated self-tests the organization either implements compensating security controls or explicitly accepts the risk of not performing the verification as required. Information system transitional states include: startup, restart, shutdown, and abort. Rationale for non-applicability: The MDM SRG addresses automated support for the management of distributed security testing.

STIG	Date
Mobile Application Security Requirements Guide	2013-01-04

Details

Check Text ( C-44040r1_chk )
This requirement is NA for the MAPP SRG.

Fix Text (F-40240r1_fix)
The requirement is NA. No fix is required.