(i) the organization defines the specific and/or types of devices for which identification and authentication is required before establishing a connection to the information system; and (ii) the information system uniquely identifies and authenticates the devices before establishing a connection to the information system. Failure to ensure that the information system to a organization-defined for organization-defined types of failures preserving [Test: SC-24.1 - Fail Fail in State [E-# OR [Test: SC-24.1 - Fail organization-defined system in Known State] [NIST 800-53 w/ High W-#] in Known State] state information in failure DHS 4300A SC-24] could leave the system Not Entered Not Entered vulnerable to several other critical security concerns resulting from non-compliance of known standards and rules. Failure to employ [Test: AC-19(5).1 - Access Control for encryption to protect the [Test: AC-19(5).1 - Full Device / Mobile Devices confidentiality and integrity of [E-# OR Full Device / Container-Based [NIST 800-53 w/ information on mobile devices High W-#] Container-Based Encryption] DHS 4300A AC-19 could lead to an occurrence of Encryption] (5)] unauthorized disclosure of Not Entered information. Not Entered
(i) the organization defines the specific and/or types of devices for which identification and authentication is required before establishing a connection to the information system; and (ii) the information system uniquely identifies and authenticates the devices before establishing a connection to the information system. [E-# OR W-#] Fail in State [NIST 800-53 w/ DHS 4300A SC-24] [Test: SC-24.1 - Fail in Known State] Not Entered Failure to ensure that the information system to a organization-defined for organization-defined types of failures preserving organization-defined system state information in failure could leave the system vulnerable to several other critical security concerns resulting from non-compliance of known standards and rules. High [Test: SC-24.1 - Fail in Known State] Not Entered [E-# OR W-#] Access Control for Mobile Devices [NIST 800-53 w/ DHS 4300A AC-19 (5)] [Test: AC-19(5).1 - Full Device / Container-Based Encryption] Not Entered Failure to employ encryption to protect the confidentiality and integrity of information on mobile devices could lead to an occurrence of unauthorized disclosure of information. High [Test: AC-19(5).1 - Full Device / Container-Based Encryption] Not Entered
Security%20Assessment%20Report%20Extensible.docx