|Finding ID||Version||Rule ID||IA Controls||Severity|
|Prior to connecting to a live operational network, such as the DISN, systems, at minimum, receive an IATO. A system without an IATO does not show adequate effort to meet IA controls and security requirements and may pose a risk to other computers or systems connecting to the operational network.|
|Test and Development Zone C Security Technical Implementation Guide||2018-09-17|
|Check Text ( C-46707r5_chk )|
| Review the accreditation package documentation to verify the test and development environment has been granted an IATO to connect to the DISN. If an IATO has not been granted, this is a finding. |
If the zone environment does not have any connectivity to the DISN or commercial ISP, this requirement is not applicable.
|Fix Text (F-44662r1_fix)|
|Certify and accredit the test and development infrastructure and supporting systems connecting to the DISN. Keep the IATO with the organization's accreditation package.|