sensitive mission/business information due to the Not Entered inappropriate or unapproved of disposal process. Failure to meet the protection of audit information requirements listed below could result in the loss of integrity of the audit information or of the audit tools, which could invalidate any result of forensic investigation: [Test: AU-9(2).1 - [Test: AU-9(2).1 - (i) the organization defines the Backup On Protection of Audit Backup On system or media for storing Separate Physical [E-# OR Information [NIST Separate Physical back up audit records that is a High Systems / W-#] 800-53 w/ DHS Systems / different system or media than Components] 4300A AU-9 (2)] Components] the system being audited; (ii) the organization defines the Not Entered Not Entered frequency of information system backups of audit records; and, (iii) the information system backs up audit records, in accordance with the defined frequency, onto system or media. Application Failure of the information [Test: SC-2.1 - [E-# OR Partitioning [NIST system to separate user High Application W-#] 800-53 w/ DHS [Test: SC-2.1 - functionality (including user Partitioning] 4300A SC-2] Application interface services) from
Not Entered sensitive mission/business information due to the inappropriate or unapproved of disposal process. [E-# OR W-#] Protection of Audit Information [NIST 800-53 w/ DHS 4300A AU-9 (2)] [Test: AU-9(2).1 - Backup On Separate Physical Systems / Components] Not Entered Failure to meet the protection of audit information requirements listed below could result in the loss of integrity of the audit information or of the audit tools, which could invalidate any result of forensic investigation: (i) the organization defines the system or media for storing back up audit records that is a different system or media than the system being audited; (ii) the organization defines the frequency of information system backups of audit records; and, (iii) the information system backs up audit records, in accordance with the defined frequency, onto system or media. High [Test: AU-9(2).1 - Backup On Separate Physical Systems / Components] Not Entered [E-# OR W-#] Application Partitioning [NIST 800-53 w/ DHS 4300A SC-2] [Test: SC-2.1 - Application Failure of the information system to separate user functionality (including user interface services) from High [Test: SC-2.1 - Application Partitioning]
Security%20Assessment%20Report%20Extensible.docx