information and the information system. Failure to ensure that a single Cryptographic Key public/private key pair is not [Test: Establishment and [Test: used by a human subscriber for - DHS FPKI [E-# OR Management [NIST - DHS FPKI both encryption and digital High Subscriber] W-#] 800-53 w/ DHS Human Subscriber] signature could lead to the 4300A SC-12 disclosure of critical DHS Not Entered (DHS-5.5.3.a)] Not Entered information/data. Information System Failure to meet any of the [Test: Connections [NIST [Test: requirements from Section - DHS [E-# OR 800-53 w/ DHS - DHS 5.4.3 could lead to compromise High Interconnections] W-#] CA-3 Interconnections] of the system or of the data in the system. Not Entered Not Entered Failure to meet the visitor access records requirements listed below could lead to the inadvertent disclosure of information: (i) the organization maintains [Test: PE-8.1 - Visitor Access Records [Test: PE-8.1 - [E-# OR visitor access records to the Access Records] [NIST 800-53 w/ Visitor Access High W-#] facility where the information DHS PE-8] Records] system resides (except for Not Entered those areas within the facility Not Entered officially designated as publicly accessible); and (ii) the organization defines the frequency to review visitor access records.
information and the information system. [E-# OR W-#] Cryptographic Key Establishment and Management [NIST 800-53 w/ DHS 4300A SC-12 (DHS-5.5.3.a)] [Test: - DHS FPKI Human Subscriber] Not Entered Failure to ensure that a single public/private key pair is not used by a human subscriber for both encryption and digital signature could lead to the disclosure of critical DHS information/data. High [Test: - DHS FPKI Subscriber] Not Entered [E-# OR W-#] Information System Connections [NIST 800-53 w/ DHS CA-3 [Test: - DHS Interconnections] Not Entered Failure to meet any of the requirements from Section 5.4.3 could lead to compromise of the system or of the data in the system. High [Test: - DHS Interconnections] Not Entered [E-# OR W-#] Access Records [NIST 800-53 w/ DHS PE-8] [Test: PE-8.1 - Visitor Access Records] Not Entered Failure to meet the visitor access records requirements listed below could lead to the inadvertent disclosure of information: (i) the organization maintains visitor access records to the facility where the information system resides (except for those areas within the facility officially designated as publicly accessible); and (ii) the organization defines the frequency to review visitor access records. High [Test: PE-8.1 - Visitor Access Records] Not Entered
Security%20Assessment%20Report%20Extensible.docx