Failure to meet the information system component inventory requirements listed below could eventually lead to the loss of critical resources due to the absence of tracking process that could detect missing critical components in a timely fashion: (i) the organization defines the frequency of employing [Test: CM-8(3).1 - automated mechanisms to Information System [Test: CM-8(3).1 - Automated detect the addition of Component Automated Unauthorized [E-# OR unauthorized Inventory [NIST Unauthorized High Component W-#] components/devices into the 800-53 w/ DHS Component Detection] information system; 4300A CM-8 (3)] Detection] (ii) the organization employs Not Entered automated mechanisms, in Not Entered accordance with the organization-defined frequency, to detect the addition of unauthorized components/devices into the information system; and (iii) the organization disables network access by such components/devices or notifies designated organizational officials. Failure to meet the least [Test: AC-6(2).1 - [E-# OR Least Privilege privilege requirements listed High Non-Privileged W-#] [NIST 800-53 w/ [Test: AC-6(2).1 - below could leave the system Access For
[E-# OR W-#] Information System Component Inventory [NIST 800-53 w/ DHS 4300A CM-8 (3)] [Test: CM-8(3).1 - Automated Unauthorized Component Detection] Not Entered Failure to meet the information system component inventory requirements listed below could eventually lead to the loss of critical resources due to the absence of tracking process that could detect missing critical components in a timely fashion: (i) the organization defines the frequency of employing automated mechanisms to detect the addition of unauthorized components/devices into the information system; (ii) the organization employs automated mechanisms, in accordance with the organization-defined frequency, to detect the addition of unauthorized components/devices into the information system; and (iii) the organization disables network access by such components/devices or notifies designated organizational officials. High [Test: CM-8(3).1 - Automated Unauthorized Component Detection] Not Entered [E-# OR W-#] Least Privilege [NIST 800-53 w/ [Test: AC-6(2).1 - Failure to meet the least privilege requirements listed below could leave the system High [Test: AC-6(2).1 - Non-Privileged Access For
Security%20Assessment%20Report%20Extensible.docx