(b) Auditing of stored data on local, network storage devices, and removable media. Failure to develop and employ Contingency continuity of operations (CO) [Test: Planning Policy and [Test: planning policies could leave - Continuity [E-# OR Procedures [NIST - Continuity the organization unprepared for of Operations High W-#] 800-53 w/ DHS of Operations any incident when it occurs, Planning] CP-1 Planning] which could lead to the compromise of the system or of Not Entered Not Entered the data in the system. Failure to ensure that the functions that transmit or Physical and receive video, infrared (IR), or Environmental [Test: radio frequency (RF) signals Protection Policy [Test: - Video, IR, [E-# OR are disabled in areas where and Procedures - Video, IR, High and RF Signals] W-#] sensitive information is [NIST 800-53 w/ and RF Signals] discussed could result in the DHS 4300A PE-1 Not Entered inadvertent transmission of (DHS-4.6.2.3.b)] Not Entered sensitive information to unauthorized individuals. Failure to meet the requirements for life cycle support listed below could result to a less-secured system Life Cycle Support that could open the [Test: [Test: [E-# OR [NIST 800-53 w/ organization to exploits by any - Custom Code] - Custom High W-#] DHS 4300A SA-3 attacker: Code] (DHS-3.6.c)] Not Entered (i) the Program Manager Not Entered review, approve, and sign all custom-developed code prior to deployment into production
(b) Auditing of stored data on local, network storage devices, and removable media. [E-# OR W-#] Contingency Planning Policy and Procedures [NIST 800-53 w/ DHS CP-1 [Test: - Continuity of Operations Planning] Not Entered Failure to develop and employ continuity of operations (CO) planning policies could leave the organization unprepared for any incident when it occurs, which could lead to the compromise of the system or of the data in the system. High [Test: - Continuity of Operations Planning] Not Entered [E-# OR W-#] Physical and Environmental Protection Policy and Procedures [NIST 800-53 w/ DHS 4300A PE-1 (DHS-4.6.2.3.b)] [Test: - Video, IR, and RF Signals] Not Entered Failure to ensure that the functions that transmit or receive video, infrared (IR), or radio frequency (RF) signals are disabled in areas where sensitive information is discussed could result in the inadvertent transmission of sensitive information to unauthorized individuals. High [Test: - Video, IR, and RF Signals] Not Entered [E-# OR W-#] Life Cycle Support [NIST 800-53 w/ DHS 4300A SA-3 (DHS-3.6.c)] [Test: - Custom Code] Not Entered Failure to meet the requirements for life cycle support listed below could result to a less-secured system that could open the organization to exploits by any attacker: (i) the Program Manager review, approve, and sign all custom-developed code prior to deployment into production High [Test: - Custom Code] Not Entered