UCF STIG Viewer Logo

Application development must not occur on DoD operational network segments.


Finding ID Version Rule ID IA Controls Severity
V-39436 ENTD0060 SV-51294r1_rule ECSC-1 Medium
To reduce the risk of compromise of DoD operational networks and data, application and system development needs to be limited to systems within a network segment designated for development only.
Test and Development Zone A Security Technical Implementation Guide 2018-09-17


Check Text ( C-46711r5_chk )
Review the organization's network diagrams to determine whether network segments for development have been established and outlined in the documentation. If application development occurs on DoD operational networks, this is a finding.

If there isn't any application development occurring in the zone environment, this requirement is not applicable.
Fix Text (F-44449r1_fix)
Designate network segments for applications and systems development. Document these designated network segments in the network diagrams for the T&D environment.