Vulnerability Assessment

Re: Need to match Audit ID with IA Control #s

nomuus — Fri, 03 Jul 2009 18:07:50 GMT

cjh:

Hi,

My security guy gave me a list of Retina findings but for the documentation that I need to submit I need to list the corresponding IA Control and Test Case / Procedure Name.

Is there a document that I can reference to help find this information?

Thanks!

Check out the security checklists here, might help you correlate your findings:

http://iase.disa.mil/stigs/checklist/

Re: Need to match Audit ID with IA Control #s

bpatten — Fri, 03 Jul 2009 03:16:47 GMT

Unfortunately Retina doesnt reference IA Controls for DIACAP. Retina audits typically reference IAV information.

Hope that helps.

Need to match Audit ID with IA Control #s

cjh — Thu, 02 Jul 2009 16:12:18 GMT

Hi,

My security guy gave me a list of Retina findings but for the documentation that I need to submit I need to list the corresponding IA Control and Test Case / Procedure Name.

Is there a document that I can reference to help find this information?

Thanks!