Subcontrol 15.3

[adammontville]

Use a wireless intrusion detection system (WIDS) to detect and alert on unauthorized wireless access points connected to the network.

Measures

None provided

Metrics

None provided

[wmunyan]

Similar to sub-control 12.6?

Inputs:

• List of approved wireless access points connected to the network
• List of WIDS sensors

Operations:

• For each WIDS sensor, enumerate the approved wireless access points covered

Measures:

• M1 - Count of approved wireless access points
• M2 - Count of WIDS sensors
• M3 - Count of approved wireless access points covered by WIDS sensors

Metrics:

• (M1 - M3) / M1 - Percentage of wireless access points not covered by WIDS sensors