techniques established for each form of testing. Failure of the components and programs to ensure that all data-at-rest, particularly in cloud or other virtual environments, preserves its identification and access requirements (anyone with Protection of [Test: access to data storage Information at Rest [Test: - DHS Data at [E-# OR containing more than one type [NIST 800-53 w/ - DHS Data at High Rest Requirements] W-#] of information must have DHS 4300A SC-28 Rest Requirements] specific access authorization (DHS-5.2.g)] Not Entered for every type of data in the Not Entered data storage) could risk the disclosure of sensitive information or the disruption of critical mission/business functions, services, and operations/processes. Failure of the organization to employ automated mechanisms to ensure network printers and facsimile machines are [Test: Baseline [Test: with the latest software - Network Configuration [E-# OR - Network version/firmware could result Printers and Facsimile [NIST 800-53 w/ High W-#] Printers and in a weak security stance of the Machines] DHS CM-2 Facsimile Machines] organization due to the (DHS-4.12.b)] untimely detection of Not Entered Not Entered misconfigured systems or of systems that need configuration updates.
techniques established for each form of testing. [E-# OR W-#] Protection of Information at Rest [NIST 800-53 w/ DHS 4300A SC-28 (DHS-5.2.g)] [Test: - DHS Data at Rest Requirements] Not Entered Failure of the components and programs to ensure that all data-at-rest, particularly in cloud or other virtual environments, preserves its identification and access requirements (anyone with access to data storage containing more than one type of information must have specific access authorization for every type of data in the data storage) could risk the disclosure of sensitive information or the disruption of critical mission/business functions, services, and operations/processes. High [Test: - DHS Data at Rest Requirements] Not Entered [E-# OR W-#] Baseline Configuration [NIST 800-53 w/ DHS CM-2 (DHS-4.12.b)] [Test: - Network Printers and Facsimile Machines] Not Entered Failure of the organization to employ automated mechanisms to ensure network printers and facsimile machines are with the latest software version/firmware could result in a weak security stance of the organization due to the untimely detection of misconfigured systems or of systems that need configuration updates. High [Test: - Network Printers and Facsimile Machines] Not Entered
Security%20Assessment%20Report%20Extensible.docx