unauthorized access to the system, which could eventually lead to the loss of sensitive information or to the disruption of critical mission/business functions, services, and operations/processes. Failure of the information system to prevent unauthorized and unintended information [Test: SC-4.1 - Information in transfer via shared system [Test: SC-4.1 - Information in Shared [E-# OR Shared Resources resources could enable an Information in Shared High Resources] W-#] [NIST 800-53 w/ attacker or malicious user to Resources] DHS 4300A SC-4] intercept the transfer and gain Not Entered unauthorized access to critical Not Entered and sensitive business/mission information. Failure of the information system to employ automated [Test: CM-6(1).1 - mechanisms to centrally [Test: CM-6(1).1 - Automated Central Configuration manage, and verify Automated Central Management / [E-# OR Settings [NIST configuration settings could Management / High Application / W-#] w/ DHS 4300A result in a weak security stance Application / Verification] CM-6 (1)] of the organization due to the Verification] untimely detection of Not Entered misconfigured systems or Not Entered technology products. Failure of the organization to [Test: CM-8(1).1 - Information System update the inventory of Updates During Component [E-# OR [Test: CM-8(1).1 - information system Installations / Inventory [NIST High W-#] Updates During components as an integral part Removals] 800-53 w/ DHS Installations / of component installations 4300A CM-8 (1)] Removals] could result in misconfigured Not Entered
unauthorized access to the system, which could eventually lead to the loss of sensitive information or to the disruption of critical mission/business functions, services, and operations/processes. [E-# OR W-#] Information in Shared Resources [NIST 800-53 w/ DHS 4300A SC-4] [Test: SC-4.1 - Information in Shared Resources] Not Entered Failure of the information system to prevent unauthorized and unintended information transfer via shared system resources could enable an attacker or malicious user to intercept the transfer and gain unauthorized access to critical and sensitive business/mission information. High [Test: SC-4.1 - Information in Shared Resources] Not Entered [E-# OR W-#] Configuration Settings [NIST w/ DHS 4300A CM-6 (1)] [Test: CM-6(1).1 - Automated Central Management / Application / Verification] Not Entered Failure of the information system to employ automated mechanisms to centrally manage, and verify configuration settings could result in a weak security stance of the organization due to the untimely detection of misconfigured systems or technology products. High [Test: CM-6(1).1 - Automated Central Management / Application / Verification] Not Entered [E-# OR W-#] Information System Component Inventory [NIST 800-53 w/ DHS 4300A CM-8 (1)] [Test: CM-8(1).1 - Updates During Installations / Removals] Failure of the organization to update the inventory of information system components as an integral part of component installations could result in misconfigured High [Test: CM-8(1).1 - Updates During Installations / Removals] Not Entered