organizational facilities for maintenance or repairs; and (v) the organization checks all potentially impacted security controls to verify that the controls are still functioning properly following maintenance or repair actions. Failure to ensure that the information system enforces approved authorizations for [Test: AC-3.1 - Access Enforcement logical access to the system in [E-# OR [Test: AC-3.1 - Access Enforcement] [NIST 800-53 w/ accordance with applicable High W-#] Access Enforcement] DHS 4300A AC-3] policy could allow the system Not Entered to become vulnerable to Not Entered unauthorized access via improper account use. Failure to meet the transparency requirements listed increases the risk to unauthorized disclosure of personally identifiable System of Records information: [Test: TR-2.1 - Notices and Privacy [Test: TR-2.1 - System of Records [E-# OR Act Statements System of Records (i) the organization publishes Notices and Privacy High W-#] [NIST 800-53 w/ Notices and Privacy System of Records Notices Act Statements] DHS 4300A Act Statements] (SORNs) in the Federal Register, subject to required Not Entered Not Entered oversight processes, for systems containing personally identifiable information (PII); (ii) the organization keeps SORNs current; and
organizational facilities for maintenance or repairs; and (v) the organization checks all potentially impacted security controls to verify that the controls are still functioning properly following maintenance or repair actions. [E-# OR W-#] Access Enforcement [NIST 800-53 w/ DHS 4300A AC-3] [Test: AC-3.1 - Access Enforcement] Not Entered Failure to ensure that the information system enforces approved authorizations for logical access to the system in accordance with applicable policy could allow the system to become vulnerable to unauthorized access via improper account use. High [Test: AC-3.1 - Access Enforcement] Not Entered [E-# OR W-#] System of Records Notices and Privacy Act Statements [NIST 800-53 w/ DHS 4300A [Test: TR-2.1 - System of Records Notices and Privacy Act Statements] Not Entered Failure to meet the transparency requirements listed increases the risk to unauthorized disclosure of personally identifiable information: (i) the organization publishes System of Records Notices (SORNs) in the Federal Register, subject to required oversight processes, for systems containing personally identifiable information (PII); (ii) the organization keeps SORNs current; and High [Test: TR-2.1 - System of Records Notices and Privacy Act Statements] Not Entered