a traffic flow policy for each managed interface; (iii) the organization protects the confidentiality and integrity of the information being transmitted across each interface; (iv) the organization documents each exception to the traffic flow policy with a supporting mission/business need and duration of that need; and (v) the organization reviews exceptions to the traffic flow policy [Assignment: organization-defined frequency] and removes exceptions that are no longer supported by an explicit mission/business need. Failure to ensure that the organization verifies that all components within the Information System [Test: CM-8(5).1 - No [Test: CM-8(5).1 - authorization boundary of the Component Duplicate Accounting [E-# OR No Duplicate information system are either Inventory [NIST High Of Components] W-#] Accounting Of inventoried as a part of the 800-53 w/ DHS Components] system or recognized by 4300A CM-8 (5)] Not Entered another system as a component Not Entered within that system could eventually lead to the loss of
a traffic flow policy for each managed interface; (iii) the organization protects the confidentiality and integrity of the information being transmitted across each interface; (iv) the organization documents each exception to the traffic flow policy with a supporting mission/business need and duration of that need; and (v) the organization reviews exceptions to the traffic flow policy [Assignment: organization-defined frequency] and removes exceptions that are no longer supported by an explicit mission/business need. [E-# OR W-#] Information System Component Inventory [NIST 800-53 w/ DHS 4300A CM-8 (5)] [Test: CM-8(5).1 - No Duplicate Accounting Of Components] Not Entered Failure to ensure that the organization verifies that all components within the authorization boundary of the information system are either inventoried as a part of the system or recognized by another system as a component within that system could eventually lead to the loss of High [Test: CM-8(5).1 - No Duplicate Accounting Of Components] Not Entered
Security%20Assessment%20Report%20Extensible.docx