(vi) the organization updates privacy plan, policies, and procedures at least biennially. Failure to meet the collaborative computing devices indicated below could lead to disclosure of information that could be used by an attacker for further attacks: [Test: SC-15.1 - Collaborative (i) the information system [Test: SC-15.1 - Collaborative [E-# OR Computing Devices prohibits remote activation of Collaborative High Computing Devices] W-#] [NIST 800-53 w/ collaborative computing Computing Devices] DHS 4300A SC-15] devices with the Not Entered exceptions where Not Entered remote activation is to be allowed; and (ii) the information system provides an explicit indication of use to users physically present at the devices. Failure to meet the contingency training requirements listed below could lead to the [Test: CP-3.1 - Contingency compromise of the system or of [Test: CP-3.1 - Contingency [E-# OR Training [NIST the data in the system: Contingency High Training] W-#] 800-53 w/ DHS Training] 4300A CP-3] (i) the organization provides Not Entered initial contingency training to Not Entered personnel with contingency roles and responsibilities with
(vi) the organization updates privacy plan, policies, and procedures at least biennially. [E-# OR W-#] Collaborative Computing Devices [NIST 800-53 w/ DHS 4300A SC-15] [Test: SC-15.1 - Collaborative Computing Devices] Not Entered Failure to meet the collaborative computing devices indicated below could lead to disclosure of information that could be used by an attacker for further attacks: (i) the information system prohibits remote activation of collaborative computing devices with the exceptions where remote activation is to be allowed; and (ii) the information system provides an explicit indication of use to users physically present at the devices. High [Test: SC-15.1 - Collaborative Computing Devices] Not Entered [E-# OR W-#] Contingency Training [NIST 800-53 w/ DHS 4300A CP-3] [Test: CP-3.1 - Contingency Training] Not Entered Failure to meet the contingency training requirements listed below could lead to the compromise of the system or of the data in the system: (i) the organization provides initial contingency training to personnel with contingency roles and responsibilities with High [Test: CP-3.1 - Contingency Training] Not Entered