The router must uniquely identify and authenticate destination by organization, system, application, and/or individual for information transfer.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-279003 | SRG-NET-000326-RTR-000001 | SV-279003r1137957_rule | CCI-002207 | medium |
| Description | ||||
| Attribution is a critical component of a security concept of operations. The ability to identify source and destination points for information flowing in information systems, allows the forensic reconstruction of events when required, and encourages policy compliance by attributing policy violations to specific organizations/individuals. Successful domain authentication requires that information system labels distinguish among systems, organizations, and individuals involved in preparing, sending, receiving, or disseminating information. This requirement applies to routers that transfer information between different security domains (e.g., cross-domain solutions). This requirement also applies to Zero Trust initiatives. | ||||
| STIG | Date | |||
| Router Security Requirements Guide | 2025-09-10 | |||
Related Frameworks
1 mapping across 3 frameworks
Related Frameworks
SCF0 mappings
No source states a mapping between these directly.
Also reachable in 3 hops (1) derived by us, not asserted by any source
Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.
- DISA STIG Benchmark (XCCDF)V5R2intersects(normalised)
- DISA CCI List2025-01-23equal to(normalised)
- SCF Secure Traceability Relationship Mapping (STRM)2026.2equal to
NIST 800-530 mappings
No source states a mapping between these directly.
Also reachable in 2 hops (2) derived by us, not asserted by any source
Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.
- DISA STIG Benchmark (XCCDF)V5R2intersects(normalised)
- DISA CCI List2025-01-23equal to(normalised)
- DISA STIG Benchmark (XCCDF)V5R2intersects(normalised)
- DISA STIG Benchmark (XCCDF)2our copyintersects(normalised)
- DISA STIG Benchmark (XCCDF)2intersects(normalised)
- DISA CCI List2025-01-23equal to(normalised)
CCI1 mapping
CCI-002207
1.00
- DISA STIG Benchmark (XCCDF)V5R2intersects(normalised)
Details
Check Text (C-279003r1137957_chk)
Verify the router is configured to uniquely identify and authenticate destination by organization, system, application, and/or individual for information transfer.
If the router does not uniquely identify and authenticate destination by organization, system, application, and/or individual for information transfer, this is a finding.
Fix Text (F-83456r1137956_fix)
Configure the router to uniquely identify and authenticate destination by organization, system, application, and/or individual for information transfer.