SP13-00-000105 - SharePoint must validate the integrity of security attributes exchanged between systems.

Information

When data is exchanged between information systems, the security attributes associated with said data need to be maintained.

Security attributes are an abstraction representing the basic properties or characteristics of an entity with respect to safeguarding information, typically associated with internal data structures (e.g., records, buffers, files) within the information system and used to enable the implementation of access control and flow control policies, reflect special dissemination, handling or distribution instructions, or support other aspects of the information security policy.

Security attributes may be explicitly or implicitly associated with the information contained within the information system.

Solution

Configure the SharePoint server to validate the integrity of security attributes exchanged between systems.

In Central Administration, click Security.

On the Security page, in the Information policy list, click 'Configure information rights management'.

Select 'Use the default RMS server specified in Active Directory', or identify a specific server by selecting 'Use this RMS server:' and entering the server name.

Configure information management policies in accordance with the system security plan requirements.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_SharePoint_2013_V2R3_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-16(1), CAT|II, CCI|CCI-001158, Rule-ID|SV-223277r612235_rule, STIG-ID|SP13-00-000105, STIG-Legacy|SV-74403, STIG-Legacy|V-59973, Vuln-ID|V-223277

Plugin: Windows

Control ID: a77c578a47c3f4f7f5ced14630c7ce9c253aa69e040f9c7ea84e22ced8430e86