organizational information system-related property. Failure of the information system to protect information and audit tools from unauthorized access, [Test: AU-9.1 - Protection of Audit [Test: AU-9.1 - modification, and deletion Protection of [E-# OR Information [NIST Protection of could result in the loss of High Information] W-#] 800-53 w/ DHS Information] integrity of the audit 4300A AU-9] information or of the audit Not Entered Not Entered tools, which could invalidate any result of forensic investigation. Failure to meet the mission/business process definition requirements listed below could result in the disclosure of critical/sensitive information or data, which could eventually lead to the loss of organizational assets or Mission/Business [Test: PM-11.1 - to the disruption of critical Process Definition [Test: PM-11.1 - Mission/Business [E-# OR mission/business functions, [NIST 800-53 w/ Mission/Business High Process Definition] W-#] services, and DHS 4300A Process Definition] operations/processes: Not Entered Not Entered (i) the organization defines mission/business processes with consideration for information security and the resulting risk to organizational operations, organizational assets, individuals, other
organizational information system-related property. [E-# OR W-#] Protection of Audit Information [NIST 800-53 w/ DHS 4300A AU-9] [Test: AU-9.1 - Protection of Information] Not Entered Failure of the information system to protect information and audit tools from unauthorized access, modification, and deletion could result in the loss of integrity of the audit information or of the audit tools, which could invalidate any result of forensic investigation. High [Test: AU-9.1 - Protection of Information] Not Entered [E-# OR W-#] Mission/Business Process Definition [NIST 800-53 w/ DHS 4300A [Test: PM-11.1 - Mission/Business Process Definition] Not Entered Failure to meet the mission/business process definition requirements listed below could result in the disclosure of critical/sensitive information or data, which could eventually lead to the loss of organizational assets or to the disruption of critical mission/business functions, services, and operations/processes: (i) the organization defines mission/business processes with consideration for information security and the resulting risk to organizational operations, organizational assets, individuals, other High [Test: PM-11.1 - Mission/Business Process Definition] Not Entered