OneNet, DHS networks, or DHS mission systems to the Internet or to extranets are occurring through DHS Trusted Internet Connection (TIC) PEPs. (ii) The PSTN is not connected to OneNet at any time. Configuration [Test: Failure to configure secure Settings [NIST [Test: - FAX Server [E-# OR incoming lines for fax servers w/ DHS 4300A - FAX Server High Configuration] W-#] may result in data being CM-6 Configuration] intercepted or compromised. Not Entered Not Entered Failure to ensure that the [Test: Rules of Behavior computers are powered down [Test: - Laptop [E-# OR [NIST 800-53 w/ when not in use (due to volatile - Laptop High Down] W-#] DHS 4300A PL-4 memory vulnerabilities) Power Down] (DHS-4.8.2.b)] lead to computer resources Not Entered damaged or destroyed. Not Entered Failure to meet the media protection policy and procedures requirements Media Protection indicated below could lead to [Test: Policy and [Test: the compromise of the system - PII Remote [E-# OR Procedures [NIST - PII Remote or of the data in the system: High Access] W-#] 800-53 w/ DHS Access] 4300A MP-1 (i) remote access of PII does Not Entered Not Entered not permit the download and remote storage of information unless the requirements for the
OneNet, DHS networks, or DHS mission systems to the Internet or to extranets are occurring through DHS Trusted Internet Connection (TIC) PEPs. (ii) The PSTN is not connected to OneNet at any time. [E-# OR W-#] Configuration Settings [NIST w/ DHS 4300A CM-6 [Test: - FAX Server Configuration] Not Entered Failure to configure secure incoming lines for fax servers may result in data being intercepted or compromised. High [Test: - FAX Server Configuration] Not Entered [E-# OR W-#] Rules of Behavior [NIST 800-53 w/ DHS 4300A PL-4 (DHS-4.8.2.b)] [Test: - Laptop Power Down] Not Entered Failure to ensure that the computers are powered down when not in use (due to volatile memory vulnerabilities) lead to computer resources damaged or destroyed. High [Test: - Laptop Down] Not Entered [E-# OR W-#] Media Protection Policy and Procedures [NIST 800-53 w/ DHS 4300A MP-1 [Test: - PII Remote Access] Not Entered Failure to meet the media protection policy and procedures requirements indicated below could lead to the compromise of the system or of the data in the system: (i) remote access of PII does not permit the download and remote storage of information unless the requirements for the High [Test: - PII Remote Access] Not Entered
Security%20Assessment%20Report%20Extensible.docx