Failure ensure that the organization includes in property accountability information for information system components, a means Information System [Test: CM-8(4).1 - for identifying by name, Component [Test: CM-8(4).1 - Accountability [E-# OR position, or role, individuals Inventory [NIST Accountability High Information] W-#] responsible for administering 800-53 w/ DHS Information] those components could allow 4300A CM-8 (4)] Not Entered difficulty in tracking personnel Not Entered responsible for making faulty configurations that could affect the system functionality negatively. Failure to meet the identification and authentication requirements listed below could result in providing any account access to critical or sensitive Identification and information: [Test: IA-2(8).1 - Authentication [Test: IA-2(8).1 - Network Access To [E-# OR (Organizational Network Access To (i) the organization defines the Privileged Accounts - High W-#] Users) [NIST Privileged Accounts - replay-resistant authentication Replay Resistant] w/ DHS 4300A Replay Resistant] mechanisms to be used for IA-2 (8)] network access to privileged Not Entered Not Entered accounts; and (ii) the information system uses the organization-defined replay-resistant authentication mechanisms for network access to privileged accounts.
[E-# OR W-#] Information System Component Inventory [NIST 800-53 w/ DHS 4300A CM-8 (4)] [Test: CM-8(4).1 - Accountability Information] Not Entered Failure ensure that the organization includes in property accountability information for information system components, a means for identifying by name, position, or role, individuals responsible for administering those components could allow difficulty in tracking personnel responsible for making faulty configurations that could affect the system functionality negatively. High [Test: CM-8(4).1 - Accountability Information] Not Entered [E-# OR W-#] Identification and Authentication (Organizational Users) [NIST w/ DHS 4300A IA-2 (8)] [Test: IA-2(8).1 - Network Access To Privileged Accounts - Replay Resistant] Not Entered Failure to meet the identification and authentication requirements listed below could result in providing any account access to critical or sensitive information: (i) the organization defines the replay-resistant authentication mechanisms to be used for network access to privileged accounts; and (ii) the information system uses the organization-defined replay-resistant authentication mechanisms for network access to privileged accounts. High [Test: IA-2(8).1 - Network Access To Privileged Accounts - Replay Resistant] Not Entered
Security%20Assessment%20Report%20Extensible.docx