organizational Computer Matching Agreements123 and to ensure that those agreements comply with the computer matching provisions of the Privacy Act. Failure to ensure that the organization establishes and manages cryptographic keys for required cryptography [Test: SC-12.1 - Cryptographic Key employed within the [Test: SC-12.1 - Cryptographic Key Establishment and information system in [E-# OR Cryptographic Key Establishment and Management [NIST accordance with High W-#] Establishment and Management] 800-53 w/ DHS requirements for key Management] 4300A SC-12] generation, distribution, Not Entered storage, access, and destruction Not Entered lead to the disclosure of critical mission/business information/data. Failure to meet the data retention and disposal requirements listed below could result in the disclosure of critical and sensitive personally Data Retention and [Test: DM-2.1 - Data identifiable information: Disposal [NIST [Test: DM-2.1 - Data Retention and [E-# OR 800-53 w/ DHS Retention and High Disposal] W-#] (i) the organization identifies 4300A Disposal] the minimum personally Not Entered identifiable information (PII) Not Entered elements that are relevant and necessary to accomplish the legally authorized purpose of collection;
organizational Computer Matching Agreements123 and to ensure that those agreements comply with the computer matching provisions of the Privacy Act. [E-# OR W-#] Cryptographic Key Establishment and Management [NIST 800-53 w/ DHS 4300A SC-12] [Test: SC-12.1 - Cryptographic Key Establishment and Management] Not Entered Failure to ensure that the organization establishes and manages cryptographic keys for required cryptography employed within the information system in accordance with requirements for key generation, distribution, storage, access, and destruction lead to the disclosure of critical mission/business information/data. High [Test: SC-12.1 - Cryptographic Key Establishment and Management] Not Entered [E-# OR W-#] Data Retention and Disposal [NIST 800-53 w/ DHS 4300A [Test: DM-2.1 - Data Retention and Disposal] Not Entered Failure to meet the data retention and disposal requirements listed below could result in the disclosure of critical and sensitive personally identifiable information: (i) the organization identifies the minimum personally identifiable information (PII) elements that are relevant and necessary to accomplish the legally authorized purpose of collection; High [Test: DM-2.1 - Data Retention and Disposal] Not Entered