use; disclosure; disruption; modification; or destruction; (ii) the organization defines the document in which risk assessment results are documented, selecting from the security plan, risk assessment report, or other document; (iii) the organization defines the frequency updates of the risk assessment or whenever there are significant changes to the information system or environment of operation (including the identification of new threats and vulnerabilities), or other conditions that may impact the security state of the system. Failure to meet the audit Audit Generation generation requirements listed [Test: AU-12.1 - [E-# OR [NIST 800-53 w/ [Test: AU-12.1 - below could result in the loss Audit Generation] High W-#] DHS 4300A Audit Generation] of the generated audit data, which could render an audit or Not Entered Not Entered forensic investigation efforts
use; disclosure; disruption; modification; or destruction; (ii) the organization defines the document in which risk assessment results are documented, selecting from the security plan, risk assessment report, or other document; (iii) the organization defines the frequency updates of the risk assessment or whenever there are significant changes to the information system or environment of operation (including the identification of new threats and vulnerabilities), or other conditions that may impact the security state of the system. [E-# OR W-#] Audit Generation [NIST 800-53 w/ DHS 4300A [Test: AU-12.1 - Audit Generation] Not Entered Failure to meet the audit generation requirements listed below could result in the loss of the generated audit data, which could render an audit or forensic investigation efforts High [Test: AU-12.1 - Audit Generation] Not Entered