A/B switches connecting information systems of differing classification levels must be on the NIAP CCEVS Products Lists.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-6759	KVM04.006.00	SV-6981r3_rule	DCBP-1	Medium

Description
An A/B switch not found on the approved KVM and A/B switch lists has not been tested to verify that it does not leak data between systems. This can lead to the compromise of sensitive data or the compromise of the ISs attached to the A/B switch. The organization will ensure only approved A/B switches are used with ISs of differing classification levels.

STIG	Date
Keyboard Video and Mouse Switch STIG	2015-12-09

Details

Check Text ( C-2906r4_chk )
The reviewer will verify the A/B switch attached to ISs of different classification levels exist on the NIAP CCEVS Products Lists. https://www.niap-ccevs.org/CCEVS_Products/ If the A/B switch is not on the NIAP CCEVS Products Lists, this is a finding.

Fix Text (F-6412r3_fix)
Replace the A/B switch with one from the NIAP CCEVS Products Lists. https://www.niap-ccevs.org/CCEVS_Products/