below could leave the system vulnerable to unauthorized access: (i) the organization defines the security functions (deployed in [Test: AC-6(1).1 - hardware, software, and Authorize Access To Security Functions] DHS 4300A AC-6 firmware) and security-relevant Security Functions] (1)] information for which access Not Entered must be explicitly authorized; Not Entered and (ii) the organization explicitly authorizes access to the organization-defined security functions and security-relevant information. Failure of the organization to store backup copies of operating system and other critical information system [Test: CP-9(3).1 - Information System [Test: CP-9(3).1 - software in a separate facility Separate Storage For [E-# OR Backup [NIST Separate Storage For or in a fire-rated container that High Critical Information] W-#] w/ DHS 4300A Critical Information] is not collocated with the CP-9 (3)] operational software could lead Not Entered Not Entered to the disruption of critical mission/business functions, operations, and processes. Failure of the organization to Media Sanitization perform test sanitization [Test: MP-6(2).1 - [E-# OR [NIST 800-53 w/ [Test: MP-6(2).1 - equipment and procedures to Equipment Testing] High W-#] DHS 4300A MP-6 Equipment Testing] verify correct performance (2)] could result in ineffective and Not Entered Not Entered untested sanitization equipment
DHS 4300A AC-6 (1)] [Test: AC-6(1).1 - Authorize Access To Security Functions] Not Entered below could leave the system vulnerable to unauthorized access: (i) the organization defines the security functions (deployed in hardware, software, and firmware) and security-relevant information for which access must be explicitly authorized; and (ii) the organization explicitly authorizes access to the organization-defined security functions and security-relevant information. Security Functions] Not Entered [E-# OR W-#] Information System Backup [NIST w/ DHS 4300A CP-9 (3)] [Test: CP-9(3).1 - Separate Storage For Critical Information] Not Entered Failure of the organization to store backup copies of operating system and other critical information system software in a separate facility or in a fire-rated container that is not collocated with the operational software could lead to the disruption of critical mission/business functions, operations, and processes. High [Test: CP-9(3).1 - Separate Storage For Critical Information] Not Entered [E-# OR W-#] Media Sanitization [NIST 800-53 w/ DHS 4300A MP-6 (2)] [Test: MP-6(2).1 - Equipment Testing] Not Entered Failure of the organization to perform test sanitization equipment and procedures to verify correct performance could result in ineffective and untested sanitization equipment High [Test: MP-6(2).1 - Equipment Testing] Not Entered