Failure to ensure that personally owned equipment and software are used to process, access, or store [Test: Rules of Behavior [Test: sensitive information with the - Personally [E-# OR [NIST 800-53 w/ - Personally written prior approval of the High Owned Equipment] W-#] DHS 4300A PL-4 Owned Equipment] AO could allow unauthorized (DHS-4.8.3.a)] user from executing critical Not Entered Not Entered transactions in DHS that can change application functionality. Failure to disable wireless capabilities of any peripheral [Test: equipment when connected to a Least Functionality [Test: - Wireless for DHS network or other IS [E-# OR [NIST 800-53 w/ - Wireless for Peripheral containing sensitive data may High W-#] DHS 4300A CM-7 Peripheral Equipment] result in unauthorized (DHS-4.8.6.a)] Equipment] personnel gaining access and Not Entered compromising or corrupting Not Entered data. Failure to meet the identification and authentication requirements Identification and listed could weaken the Authentication overall security posture of the [Test: Policy and [Test: system due to lack of - [E-# OR Procedures [NIST - compliance to known standards High W-#] 800-53 w/ DHS and policies: 4300A IA-1 Not Entered Not Entered (i) the components implement the necessary guidelines for requirements; and
[E-# OR W-#] Rules of Behavior [NIST 800-53 w/ DHS 4300A PL-4 (DHS-4.8.3.a)] [Test: - Personally Owned Equipment] Not Entered Failure to ensure that personally owned equipment and software are used to process, access, or store sensitive information with the written prior approval of the AO could allow unauthorized user from executing critical transactions in DHS that can change application functionality. High [Test: - Personally Owned Equipment] Not Entered [E-# OR W-#] Least Functionality [NIST 800-53 w/ DHS 4300A CM-7 (DHS-4.8.6.a)] [Test: - Wireless for Peripheral Equipment] Not Entered Failure to disable wireless capabilities of any peripheral equipment when connected to a DHS network or other IS containing sensitive data may result in unauthorized personnel gaining access and compromising or corrupting data. High [Test: - Wireless for Peripheral Equipment] Not Entered [E-# OR W-#] Identification and Authentication Policy and Procedures [NIST 800-53 w/ DHS 4300A IA-1 [Test: - Not Entered Failure to meet the identification and authentication requirements listed could weaken the overall security posture of the system due to lack of compliance to known standards and policies: (i) the components implement the necessary guidelines for requirements; and High [Test: - Not Entered
Security%20Assessment%20Report%20Extensible.docx