temporary and emergency accounts after time period for each type of account; and, (ii) the organization defines a time period for each type of account after which the information system terminates temporary and emergency accounts. Failure of the organization to employ automated mechanisms Incident Reporting to assist in the reporting of [Test: IR-6(1).1 - [Test: IR-6(1).1 - [E-# OR [NIST 800-53 w/ security incidents lead to Automated Reporting] Automated High W-#] DHS 4300A IR-6 the organization failing to Reporting] (1)] attend to an incident in a timely Not Entered manner and eventually losing Not Entered critical mission/business assets. Failure to audit privilege functions could leave the [Test: AC-6(9).1 - Least Privilege system vulnerable to several [Test: AC-6(9).1 - Auditing Use Of [E-# OR [NIST 800-53 w/ risks including access by Auditing Use Of High Privileged Functions] W-#] DHS 4300A AC-6 untrained or unauthorized Privileged Functions] (9)] personnel, improper Not Entered configuration, or faulty Not Entered monitoring. Failure of the organization to provide a short-term [Test: PE-11.1 - Emergency Power uninterruptible power supply to [E-# OR [Test: PE-11.1 - Emergency Power] [NIST 800-53 w/ facilitate an orderly shutdown High W-#] Emergency DHS 4300A PE-11] of the information system or Not Entered transition of the information Not Entered system to long-term alternate
temporary and emergency accounts after time period for each type of account; and, (ii) the organization defines a time period for each type of account after which the information system terminates temporary and emergency accounts. [E-# OR W-#] Incident Reporting [NIST 800-53 w/ DHS 4300A IR-6 (1)] [Test: IR-6(1).1 - Automated Reporting] Not Entered Failure of the organization to employ automated mechanisms to assist in the reporting of security incidents lead to the organization failing to attend to an incident in a timely manner and eventually losing critical mission/business assets. High [Test: IR-6(1).1 - Automated Reporting] Not Entered [E-# OR W-#] Least Privilege [NIST 800-53 w/ DHS 4300A AC-6 (9)] [Test: AC-6(9).1 - Auditing Use Of Privileged Functions] Not Entered Failure to audit privilege functions could leave the system vulnerable to several risks including access by untrained or unauthorized personnel, improper configuration, or faulty monitoring. High [Test: AC-6(9).1 - Auditing Use Of Privileged Functions] Not Entered [E-# OR W-#] Emergency Power [NIST 800-53 w/ DHS 4300A PE-11] [Test: PE-11.1 - Emergency Not Entered Failure of the organization to provide a short-term uninterruptible power supply to facilitate an orderly shutdown of the information system or transition of the information system to long-term alternate High [Test: PE-11.1 - Emergency Power] Not Entered
Security%20Assessment%20Report%20Extensible.docx