of the system to potential damage from physical/environmental hazards and to unauthorized access. Failure of the information [Test: AC-17(2).1 - [Test: AC-17(2).1 - system to employ cryptography Protection Of Remote Access Protection Of to protect the confidentiality Confidentiality / [E-# OR [NIST 800-53 w/ Confidentiality / and integrity of remote access High Integrity Using W-#] DHS 4300A AC-17 Integrity Using sessions result in the Encryption] (2)] Encryption] disclosure of critical or sensitive information. Not Entered Not Entered Failure of the organization to provide a long-term alternate power supply for the [Test: PE-11(1).1 - information system that is [Test: PE-11(1).1 - Long-Term Alternate Emergency Power capable of maintaining Long-Term Alternate Power Supply - [E-# OR [NIST 800-53 w/ minimally required operational Power Supply - High Minimal Operational W-#] DHS 4300A PE-11 capability in the event of an Minimal Operational Capability] (1)] extended loss of the primary Capability] power source could result in Not Entered the unavailability of critical Not Entered mission/business information on systems. Failure of the information system to provide Audit Reduction [Test: AU-7.1 - Audit reduction and report generation and Report [Test: AU-7.1 - Audit Reduction and Report [E-# OR tools that support after-the-fact Generation [NIST Reduction and Report High Generation] W-#] investigations of security 800-53 w/ DHS Generation] incidents without altering 4300A AU-7] Not Entered original audit records could Not Entered result in unwanted amount of
of the system to potential damage from physical/environmental hazards and to unauthorized access. [E-# OR W-#] Remote Access [NIST 800-53 w/ DHS 4300A AC-17 (2)] [Test: AC-17(2).1 - Protection Of Confidentiality / Integrity Using Encryption] Not Entered Failure of the information system to employ cryptography to protect the confidentiality and integrity of remote access sessions result in the disclosure of critical or sensitive information. High [Test: AC-17(2).1 - Protection Of Confidentiality / Integrity Using Encryption] Not Entered [E-# OR W-#] Emergency Power [NIST 800-53 w/ DHS 4300A PE-11 (1)] [Test: PE-11(1).1 - Long-Term Alternate Power Supply - Minimal Operational Capability] Not Entered Failure of the organization to provide a long-term alternate power supply for the information system that is capable of maintaining minimally required operational capability in the event of an extended loss of the primary power source could result in the unavailability of critical mission/business information on systems. High [Test: PE-11(1).1 - Long-Term Alternate Power Supply - Minimal Operational Capability] Not Entered [E-# OR W-#] Audit Reduction and Report Generation [NIST 800-53 w/ DHS 4300A AU-7] [Test: AU-7.1 - Audit Reduction and Report Generation] Not Entered Failure of the information system to provide reduction and report generation tools that support after-the-fact investigations of security incidents without altering original audit records could result in unwanted amount of High [Test: AU-7.1 - Audit Reduction and Report Generation] Not Entered
Security%20Assessment%20Report%20Extensible.docx