Requirements Traceability Matrix Methods Tailored Security Control Security Control Planned Actual Test Req./ Result Notes Ref. Category Type Imp. Imp. #(s) Control I E T IN OUT Access Access NIST Control Control AC-1.1, w/ DHS Policy and Not Specified Not Entered Not Assigned X X - - - Not Met None Policy and AC-1.2 AC-1 Procedures Procedures (T) NIST Access w/ DHS Sharing of Control 4300A Personal Policy and Not Specified Not Entered Not Assigned - X X - - Not Met None Passwords Procedures (T) NIST Account w/ DHS Account Management Not Specified Not Entered Not Assigned AC-2.1 X X - - - Not Met None 4300A Management (T) NIST Account w/ DHS Account Management Not Specified Not Entered Not Assigned AC-2(1).1 X X - - - Not Met None 4300A Management (T) (1) NIST Account w/ DHS Account Management Not Specified Not Entered Not Assigned AC-2(2).1 X X - - - Not Met None 4300A Management (T) (2) NIST Account w/ DHS Account Management Not Specified Not Entered Not Assigned AC-2(3).1 X X - - - Not Met None 4300A Management (T) (3) NIST Account w/ DHS Account Management Not Specified Not Entered Not Assigned AC-2(4).1 X X - - - Not Met None 4300A Management (T) (4)
Requirements Traceability Matrix Control Ref. Security Req./ Control Security Category Control Type Planned Imp. Actual Imp. Test #(s) Methods Tailored Result Notes I E T IN OUT NIST w/ DHS AC-1 Access Control Policy and Procedures Access Control Policy and Procedures (T) Not Specified Not Entered Not Assigned AC-1.1, AC-1.2 X X - - - Not Met None NIST w/ DHS 4300A Sharing of Personal Passwords Access Control Policy and Procedures (T) Not Specified Not Entered Not Assigned - X X - - Not Met None NIST w/ DHS 4300A Account Management Account Management (T) Not Specified Not Entered Not Assigned AC-2.1 X X - - - Not Met None NIST w/ DHS 4300A (1) Account Management Account Management (T) Not Specified Not Entered Not Assigned AC-2(1).1 X X - - - Not Met None NIST w/ DHS 4300A (2) Account Management Account Management (T) Not Specified Not Entered Not Assigned AC-2(2).1 X X - - - Not Met None NIST w/ DHS 4300A (3) Account Management Account Management (T) Not Specified Not Entered Not Assigned AC-2(3).1 X X - - - Not Met None NIST w/ DHS 4300A (4) Account Management Account Management (T) Not Specified Not Entered Not Assigned AC-2(4).1 X X - - - Not Met None
Requirements%20Traceability%20Matrix%20%28RTM%29.docx