Enforcement] unreliable information flow enforcement control Not Entered Not Entered implementation. Failure to ensure that the information system session [Test: AC-11(1).1 - conceals information Session Lock [NIST [Test: AC-11(1).1 - Pattern-Hiding [E-# OR previously visible on the 800-53 w/ DHS Pattern-Hiding High Displays] W-#] display with a publicly 4300A AC-11 (1)] Displays] viewable image could leave Not Entered essential data visible to Not Entered personnel. Failure to meet the mobile code requirements indicated below could leave the system more exposed to vulnerabilities, which an attacker could try to exploit using various vectors and compromise the system or the data in the system: (i) the organization defines [Test: SC-18.1 - Mobile Code [NIST [E-# OR [Test: SC-18.1 - acceptable and unacceptable Mobile Code] 800-53 w/ DHS High W-#] Mobile Code] mobile code and mobile code SC-18] technologies; Not Entered Not Entered (ii) the organization establishes usage restrictions and implementation guidance for acceptable mobile code and mobile code technologies; and (iii) the organization authorizes, monitors, and controls the use of mobile code within the information system.
Enforcement] Not Entered unreliable information flow enforcement control implementation. Not Entered [E-# OR W-#] Session Lock [NIST 800-53 w/ DHS 4300A AC-11 (1)] [Test: AC-11(1).1 - Pattern-Hiding Displays] Not Entered Failure to ensure that the information system session conceals information previously visible on the display with a publicly viewable image could leave essential data visible to personnel. High [Test: AC-11(1).1 - Pattern-Hiding Displays] Not Entered [E-# OR W-#] Mobile Code [NIST 800-53 w/ DHS SC-18] [Test: SC-18.1 - Mobile Code] Not Entered Failure to meet the mobile code requirements indicated below could leave the system more exposed to vulnerabilities, which an attacker could try to exploit using various vectors and compromise the system or the data in the system: (i) the organization defines acceptable and unacceptable mobile code and mobile code technologies; (ii) the organization establishes usage restrictions and implementation guidance for acceptable mobile code and mobile code technologies; and (iii) the organization authorizes, monitors, and controls the use of mobile code within the information system. High [Test: SC-18.1 - Mobile Code] Not Entered
Security%20Assessment%20Report%20Extensible.docx