sessions could risk the disclosure of sensitive Session Authenticity] 800-53 w/ DHS information or the disruption of SC-23] critical mission/business Not Entered Not Entered functions, services, and operations/processes. Failure to ensure that the information system implements cryptographic mechanisms to prevent unauthorized disclosure of information or detect changes to information [Test: SC-8(1).1 - during transmission unless Transmission [Test: SC-8(1).1 - Cryptographic Or otherwise protected by [E-# OR Integrity [NIST Cryptographic Or Alternate Physical organization-defined High W-#] 800-53 w/ DHS Alternate Physical Protection] alternative physical safeguards 4300A SC-8 (1)] Protection] could allow an attacker or a Not Entered malicious user to employ Not Entered various tactics/strategy to intercept the transmission and gain unauthorized access to critical and sensitive information/data. Failure to ensure that the information system at managed interfaces denies network [Test: SC-7(5).1 - Boundary communications traffic by [Test: SC-7(5).1 - Deny By Default / [E-# OR Protection [NIST default and allows network Deny By Default / High Allow By Exception] W-#] 800-53 w/ DHS communications traffic by Allow By Exception] 4300A SC-7 (5)] exception (i.e., deny all, permit Not Entered by exception) could result to Not Entered undetected unauthorized access.
800-53 w/ DHS SC-23] Session Authenticity] Not Entered sessions could risk the disclosure of sensitive information or the disruption of critical mission/business functions, services, and operations/processes. Not Entered [E-# OR W-#] Transmission Integrity [NIST 800-53 w/ DHS 4300A SC-8 (1)] [Test: SC-8(1).1 - Cryptographic Or Alternate Physical Protection] Not Entered Failure to ensure that the information system implements cryptographic mechanisms to prevent unauthorized disclosure of information or detect changes to information during transmission unless otherwise protected by organization-defined alternative physical safeguards could allow an attacker or a malicious user to employ various tactics/strategy to intercept the transmission and gain unauthorized access to critical and sensitive information/data. High [Test: SC-8(1).1 - Cryptographic Or Alternate Physical Protection] Not Entered [E-# OR W-#] Boundary Protection [NIST 800-53 w/ DHS 4300A SC-7 (5)] [Test: SC-7(5).1 - Deny By Default / Allow By Exception] Not Entered Failure to ensure that the information system at managed interfaces denies network communications traffic by default and allows network communications traffic by exception (i.e., deny all, permit by exception) could result to undetected unauthorized access. High [Test: SC-7(5).1 - Deny By Default / Allow By Exception] Not Entered
Security%20Assessment%20Report%20Extensible.docx