BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

03.04.12 System and Component Configuration for High-Risk Areas

NIST SP 800-171 Rev 3 (CUI; CMMC Level 2) OSCAL 1.1.0 against OSCAL 1.1.0
All changes in this version
unchanged 03.04 Configuration Management

Title

System and Component Configuration for High-Risk Areas

Control

a. Issue systems or system components with the following configurations to individuals traveling to high-risk locations: [Assignment: configurations].
b. Apply the following security requirements to the systems or components when the individuals return from travel: [Assignment: security requirements].

Discussion

When it is known that a system or a system component will be in a high-risk area, additional security requirements may be needed to counter the increased threat. Organizations can implement protective measures on the systems or system components used by individuals departing on and returning from travel. Actions include determining whether the locations are of concern, defining the required configurations for the components, ensuring that the components are configured as intended before travel is initiated, and taking additional actions after travel is completed. For example, systems going into high-risk areas can be configured with sanitized hard drives, limited applications, and more stringent configuration settings. Actions applied to mobile devices upon return from travel include examining the device for signs of physical tampering and purging and reimaging the device storage.

Parameters

A.03.04.12.ODP.01: configurations
A.03.04.12.ODP.02: security requirements

Assessment objective

systems or system components with the following configurations are issued to individuals traveling to high-risk locations: [Assignment: configurations].