overall security posture of the system: (i) the organization uses software and associated documentation in accordance with contract agreements and copyright laws; (ii) the organization tracks the Software Usage use of software and associated 800-53 w/ DHS Restrictions] documentation protected by 4300A CM-10] Not Entered quantity licenses to control Not Entered copying and distribution; and, (iii) the organization controls and documents the use of file sharing technology to ensure that this capability is not used for the unauthorized distribution, display, performance, or reproduction of copyrighted work. Failure to meet the privacy control requirements for collecting PIIs listed below could lead to unauthorized [Test: AP-2.1 - Purpose disclosure of personal [Test: AP-2.1 - Purpose [E-# OR Specification [NIST identifiable information: Purpose High Specification] W-#] 800-53 w/ DHS Specification] PRIV-AP-2] (i) the organization identifies Not Entered the legal bases that authorize a Not Entered particular personally identifiable information (PII) collection or activity that
800-53 w/ DHS 4300A CM-10] Software Usage Restrictions] Not Entered overall security posture of the system: (i) the organization uses software and associated documentation in accordance with contract agreements and copyright laws; (ii) the organization tracks the use of software and associated documentation protected by quantity licenses to control copying and distribution; and, (iii) the organization controls and documents the use of file sharing technology to ensure that this capability is not used for the unauthorized distribution, display, performance, or reproduction of copyrighted work. Not Entered [E-# OR W-#] Purpose Specification [NIST 800-53 w/ DHS PRIV-AP-2] [Test: AP-2.1 - Purpose Specification] Not Entered Failure to meet the privacy control requirements for collecting PIIs listed below could lead to unauthorized disclosure of personal identifiable information: (i) the organization identifies the legal bases that authorize a particular personally identifiable information (PII) collection or activity that High [Test: AP-2.1 - Purpose Specification] Not Entered
Security%20Assessment%20Report%20Extensible.docx