disruption of critical mission/business functions, services, and operations/processes. Failure of the organization to either (a) check all maintenance equipment with the capability of retaining information so that no organizational information is written on the equipment or the equipment is appropriately sanitized before release; or (b) [Test: MA-3(3).1 - Maintenance Tools [Test: MA-3(3).1 - retain the maintenance Prevent Unauthorized [E-# OR [NIST 800-53 w/ Prevent Unauthorized equipment within the facility or High Removal] W-#] DHS 4300A MA-3 Removal] destroys the equipment if the (3)] equipment cannot be sanitized, Not Entered Not Entered unless an appropriate organization official explicitly authorizes an exception, could lead to the system losing its integrity or its stability and possibly to the disclosure of critical and sensitive information. Failure to meet the incident response testing and exercises Incident Response [Test: IR-3.1 - requirements listed below Testing and [Test: IR-3.1 - Incident Response [E-# OR could result in the inability to Exercises [NIST Incident Response High Testing] W-#] respond properly to an incident 800-53 w/ DHS Testing] and in a timely manner, which 4300A IR-3] Not Entered could lead to the disruption of Not Entered critical mission/business
disruption of critical mission/business functions, services, and operations/processes. [E-# OR W-#] Maintenance Tools [NIST 800-53 w/ DHS 4300A MA-3 (3)] [Test: MA-3(3).1 - Prevent Unauthorized Removal] Not Entered Failure of the organization to either (a) check all maintenance equipment with the capability of retaining information so that no organizational information is written on the equipment or the equipment is appropriately sanitized before release; or (b) retain the maintenance equipment within the facility or destroys the equipment if the equipment cannot be sanitized, unless an appropriate organization official explicitly authorizes an exception, could lead to the system losing its integrity or its stability and possibly to the disclosure of critical and sensitive information. High [Test: MA-3(3).1 - Prevent Unauthorized Removal] Not Entered [E-# OR W-#] Incident Response Testing and Exercises [NIST 800-53 w/ DHS 4300A IR-3] [Test: IR-3.1 - Incident Response Testing] Not Entered Failure to meet the incident response testing and exercises requirements listed below could result in the inability to respond properly to an incident and in a timely manner, which could lead to the disruption of critical mission/business High [Test: IR-3.1 - Incident Response Testing] Not Entered