(i) the organization defines the time-periods within which information system components must be re-imaged from configuration-controlled and integrity-protected disk images representing a secure, operational state for the components; and (ii) the organization provides the capability to re-image information system components, within organization-defined from and disk images representing a secure, operational state for the components. Failure to ensure that the organization limits the use of organization-controlled Use of External [Test: AC-20(2).1 - portable storage media by Information [Test: AC-20(2).1 - Portable Storage [E-# OR authorized individuals on Systems [NIST Portable Storage High Devices] W-#] external information systems w/ DHS 4300A Devices] could leave essential data AC-20 (2)] Not Entered exposed to unauthorized access Not Entered and viewing by individuals not connected to the organization. Failure to ensure that the [Test: RA-5(4).1 - [E-# OR Vulnerability organization attempts to High Discoverable W-#] Scanning [NIST [Test: RA-5(4).1 - discern what information Information]
(i) the organization defines the time-periods within which information system components must be re-imaged from configuration-controlled and integrity-protected disk images representing a secure, operational state for the components; and (ii) the organization provides the capability to re-image information system components, within organization-defined from and disk images representing a secure, operational state for the components. [E-# OR W-#] Use of External Information Systems [NIST w/ DHS 4300A AC-20 (2)] [Test: AC-20(2).1 - Portable Storage Devices] Not Entered Failure to ensure that the organization limits the use of organization-controlled portable storage media by authorized individuals on external information systems could leave essential data exposed to unauthorized access and viewing by individuals not connected to the organization. High [Test: AC-20(2).1 - Portable Storage Devices] Not Entered [E-# OR W-#] Vulnerability Scanning [NIST [Test: RA-5(4).1 - Failure to ensure that the organization attempts to discern what information High [Test: RA-5(4).1 - Discoverable Information]
Security%20Assessment%20Report%20Extensible.docx