impacts privacy; and, (ii) the organization specifies in their notices the purpose(s) for which PII is collected. Failure to meet the security plan update requirements listed below could leave the users unaware of the required behavior with regard to information usage, which could lead to the user inadvertently abusing the information system resources: (i) the organization establishes the rules that describe information system user [Test: PL-4.1 - Rules Rules of Behavior [E-# OR [Test: PL-4.1 - Rules responsibilities and expected of Behavior] [NIST 800-53 w/ High W-#] of Behavior] behavior with regard to DHS 4300A PL-4] information and information Not Entered Not Entered system usage; (ii) the organization makes the rules available to all information system users; and (iii) the organization receives a signed acknowledgement from users indicating that they have read, understand, and agree to abide by the rules of behavior, before authorizing access to information and the information system.
impacts privacy; and, (ii) the organization specifies in their notices the purpose(s) for which PII is collected. [E-# OR W-#] Rules of Behavior [NIST 800-53 w/ DHS 4300A PL-4] [Test: PL-4.1 - Rules of Behavior] Not Entered Failure to meet the security plan update requirements listed below could leave the users unaware of the required behavior with regard to information usage, which could lead to the user inadvertently abusing the information system resources: (i) the organization establishes the rules that describe information system user responsibilities and expected behavior with regard to information and information system usage; (ii) the organization makes the rules available to all information system users; and (iii) the organization receives a signed acknowledgement from users indicating that they have read, understand, and agree to abide by the rules of behavior, before authorizing access to information and the information system. High [Test: PL-4.1 - Rules of Behavior] Not Entered