awareness training on [Test: AT-2(2).1 - recognizing and reporting Insider Threat] potential indicators of insider Not Entered threat could result in the DHS 4300A AT-2 Not Entered organization's personnel's (2)] Not Entered inability to communicate Not Entered employee and management Not Entered concerns regarding insider Not Entered threats. Failure to meet the account management requirements indicated below could result in an inaccurate audit report and could enable an intruder to utilize the inactive accounts as [Test: AC-2(3).1 - Account access points to the system: [Test: AC-2(3).1 - Disable Inactive [E-# OR Management [NIST Disable Inactive High Accounts] W-#] 800-53 w/ DHS (i) the organization defines in a Accounts] 4300A AC-2 (3)] time period after which the Not Entered information system disables Not Entered inactive accounts; and (ii) the information system automatically disables inactive accounts after time period. Failure to meet the developer configuration management [Test: SA-10.1 - Developer [Test: SA-10.1 - requirements listed below Developer Configuration [E-# OR Developer could lead to instability of the Configuration Management [NIST High W-#] Configuration system or possibly to the Management] 800-53 w/ DHS Management] compromise of the system: 4300A SA-10] Not Entered Not Entered (i) perform configuration
DHS 4300A AT-2 (2)] [Test: AT-2(2).1 - Insider Threat] Not Entered Not Entered Not Entered awareness training on recognizing and reporting potential indicators of insider threat could result in the organization's personnel's inability to communicate employee and management concerns regarding insider threats. Not Entered Not Entered Not Entered [E-# OR W-#] Account Management [NIST 800-53 w/ DHS 4300A AC-2 (3)] [Test: AC-2(3).1 - Disable Inactive Accounts] Not Entered Failure to meet the account management requirements indicated below could result in an inaccurate audit report and could enable an intruder to utilize the inactive accounts as access points to the system: (i) the organization defines in a time period after which the information system disables inactive accounts; and (ii) the information system automatically disables inactive accounts after time period. High [Test: AC-2(3).1 - Disable Inactive Accounts] Not Entered [E-# OR W-#] Developer Configuration Management [NIST 800-53 w/ DHS 4300A SA-10] [Test: SA-10.1 - Developer Configuration Management] Not Entered Failure to meet the developer configuration management requirements listed below could lead to instability of the system or possibly to the compromise of the system: (i) perform configuration High [Test: SA-10.1 - Developer Configuration Management] Not Entered
Security%20Assessment%20Report%20Extensible.docx