Failure of the organization to employ automated mechanisms to maintain an up-to-date, complete, accurate, and readily Information System available inventory of [Test: CM-8(2).1 - Component [Test: CM-8(2).1 - information system Automated [E-# OR Inventory [NIST Automated components could eventually High Maintenance] W-#] 800-53 w/ DHS Maintenance] lead to the loss of critical 4300A CM-8 (2)] resources due to the absence of Not Entered Not Entered tracking process that could detect missing critical components in a timely fashion. Failure to ensure that the organization enforces physical access authorizations to the information system in addition to the physical access controls for the facility at physical spaces [Test: PE-3(1).1 - Physical Access containing one or more [Test: PE-3(1).1 - Information System [E-# OR Control [NIST components of the information Information System High Access] W-#] w/ DHS 4300A system could result in access Access] PE-3 (1)] control system lacking Not Entered effective physical protection, Not Entered which could lead to the disclosure of sensitive information or to the disruption of critical mission/business functions, operations, and processes. [E-# OR Non-Local Failure of the organization to [Test: MA-4(2).1 - High W-#] Maintenance [NIST address the installation and use Document Nonlocal
[E-# OR W-#] Information System Component Inventory [NIST 800-53 w/ DHS 4300A CM-8 (2)] [Test: CM-8(2).1 - Automated Maintenance] Not Entered Failure of the organization to employ automated mechanisms to maintain an up-to-date, complete, accurate, and readily available inventory of information system components could eventually lead to the loss of critical resources due to the absence of tracking process that could detect missing critical components in a timely fashion. High [Test: CM-8(2).1 - Automated Maintenance] Not Entered [E-# OR W-#] Physical Access Control [NIST w/ DHS 4300A PE-3 (1)] [Test: PE-3(1).1 - Information System Access] Not Entered Failure to ensure that the organization enforces physical access authorizations to the information system in addition to the physical access controls for the facility at physical spaces containing one or more components of the information system could result in access control system lacking effective physical protection, which could lead to the disclosure of sensitive information or to the disruption of critical mission/business functions, operations, and processes. High [Test: PE-3(1).1 - Information System Access] Not Entered [E-# OR W-#] Non-Local Maintenance [NIST Failure of the organization to address the installation and use High [Test: MA-4(2).1 - Document Nonlocal