addressed associated risks in the Security Plan could result in the weak security stance of the organization due to the lack Not Entered of awareness on the security planning policy and procedures. Failure to ensure that all Statements of Work (SOW) and contract vehicles have System and Services identified and documented the [Test: Acquisition Policy specific security requirements [Test: - Statements of [E-# OR and Procedures for information system services - Statements of High Work] W-#] [NIST 800-53 w/ and operations required of the Work] DHS 4300A SA-1 contractor could lead to Not Entered (DHS-3.3.a)] with the entity’s Not Entered policies, procedures, privacy requirements, agreements or contracts. Failure to ensure that the procurements for services and products involving facility or system access control are in System and Services accordance with DHS guidance [Test: Acquisition Policy regarding HSPD-12 [Test: - Procurements [E-# OR and Procedures implementation could result in - Procurements High Regarding HSPD-12] W-#] [NIST 800-53 w/ the acquisition of a Regarding HSPD-12] DHS 4300A SA-1 system/service that would Not Entered (DHS-3.2.g)] expose the organization to Not Entered various threats and exploits, which could cause the loss of critical mission/business assets or the disruption of
Not Entered addressed associated risks in the Security Plan could result in the weak security stance of the organization due to the lack of awareness on the security planning policy and procedures. [E-# OR W-#] System and Services Acquisition Policy and Procedures [NIST 800-53 w/ DHS 4300A SA-1 (DHS-3.3.a)] [Test: - Statements of Work] Not Entered Failure to ensure that all Statements of Work (SOW) and contract vehicles have identified and documented the specific security requirements for information system services and operations required of the contractor could lead to with the entity’s policies, procedures, privacy requirements, agreements or contracts. High [Test: - Statements of Work] Not Entered [E-# OR W-#] System and Services Acquisition Policy and Procedures [NIST 800-53 w/ DHS 4300A SA-1 (DHS-3.2.g)] [Test: - Procurements Regarding HSPD-12] Not Entered Failure to ensure that the procurements for services and products involving facility or system access control are in accordance with DHS guidance regarding HSPD-12 implementation could result in the acquisition of a system/service that would expose the organization to various threats and exploits, which could cause the loss of critical mission/business assets or the disruption of High [Test: - Procurements Regarding HSPD-12] Not Entered