which could render an audit or forensic investigation efforts useless: (i) the organization defines the retention period for audit records; (ii) the retention period for audit records is consistent with the records retention policy; Retention] and, (iii) the organization retains Not Entered Not Entered audit records for the organization-defined time period consistent with the records retention policy to provide support for investigations of security incidents and to meet regulatory and organizational information retention requirements. Failure to meet the publicly accessible content requirements listed could leave essential data exposed to unauthorized [Test: AC-22.1 - Publicly Accessible [Test: AC-22.1 - access and viewing by Publicly Accessible [E-# OR Content [NIST Publicly Accessible individuals not connected to High Content] W-#] w/ DHS 4300A Content] the organization: AC-22] Not Entered Not Entered (i) the organization designates individuals authorized to post information onto an
Retention] Not Entered which could render an audit or forensic investigation efforts useless: (i) the organization defines the retention period for audit records; (ii) the retention period for audit records is consistent with the records retention policy; and, (iii) the organization retains audit records for the organization-defined time period consistent with the records retention policy to provide support for investigations of security incidents and to meet regulatory and organizational information retention requirements. Not Entered [E-# OR W-#] Publicly Accessible Content [NIST w/ DHS 4300A AC-22] [Test: AC-22.1 - Publicly Accessible Content] Not Entered Failure to meet the publicly accessible content requirements listed could leave essential data exposed to unauthorized access and viewing by individuals not connected to the organization: (i) the organization designates individuals authorized to post information onto an High [Test: AC-22.1 - Publicly Accessible Content] Not Entered
Security%20Assessment%20Report%20Extensible.docx