The ISEC7 SPHERE must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the ISEC7 SPHERE.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-224763	ISEC-06-000200	SV-224763r1013805_rule		Medium

Description

STIG	Date
ISEC7 Sphere Security Technical Implementation Guide	2024-08-20

Details

Check Text (C-26454r1013804_chk)

Log in to the ISEC7 SPHERE Console.
Note if the appropriate Standard mandatory DOD Notice and Consent Banner is displayed.

Alternatively, if already logged in to the ISEC7 SPHERE Console, navigate to Administration >> User Self Service >> Page Customizations.
Verify that a Page Customization exists to display the Standard mandatory DOD Notice and Consent Banner.

If a Page Customization does not exist, or it does not contain the required DOD banner, this is a finding.

Fix Text (F-26442r1004907_fix)

Set the session timeout to the correct value of 15 minutes or less.