(ii) two-factor authentication is only allowed during remote access if one of the factors is provided by a device separate from the computer gaining access; (iv) any two-factor authentication is on Department-controlled certificates or hardware tokens issued directly to each authorized user; and (v) remote access solutions comply with the encryption requirements of FIPS 140-2, Security Requirements for Cryptographic Modules. Failure of the information system, that provides name/address resolution Secure service for local clients, to [Test: SC-21.1 - Name/Address [Test: SC-21.1 - perform data origin Secure Name / Resolution Service Secure Name / authentication and data Address Resolution [E-# OR (Recursive or Address Resolution integrity verification on the High Service(Recursive or W-#] Caching Resolver) Service(Recursive or resolution responses it receives Caching Resolver)] [NIST 800-53 w/ Caching Resolver)] from authoritative sources DHS SC-21] when requested by client Not Entered Not Entered systems could lead to the complete compromise of the system.
(ii) two-factor authentication is only allowed during remote access if one of the factors is provided by a device separate from the computer gaining access; (iv) any two-factor authentication is on Department-controlled certificates or hardware tokens issued directly to each authorized user; and (v) remote access solutions comply with the encryption requirements of FIPS 140-2, Security Requirements for Cryptographic Modules. [E-# OR W-#] Secure Name/Address Resolution Service (Recursive or Caching Resolver) [NIST 800-53 w/ DHS SC-21] [Test: SC-21.1 - Secure Name / Address Resolution Service(Recursive or Caching Resolver)] Not Entered Failure of the information system, that provides name/address resolution service for local clients, to perform data origin authentication and data integrity verification on the resolution responses it receives from authoritative sources when requested by client systems could lead to the complete compromise of the system. High [Test: SC-21.1 - Secure Name / Address Resolution Service(Recursive or Caching Resolver)] Not Entered
Security%20Assessment%20Report%20Extensible.docx