Failure to meet the security assessments requirements listed could weaken the overall security posture of the system: (i) the organization defines the frequency of assessing the security controls in the information system to determine the extent to which the controls are implemented correctly, operating as [Test: CA-2(2).1 - [Test: CA-2(2).1 - intended, and producing the Specialized Specialized desired outcome with respect to Assessments] Assessments] meeting the security Security requirements for the system; [E-# OR Assessments [NIST Not Entered Not Entered (ii) the organization assesses High W-#] 800-53 w/ DHS the security controls in the 4300A CA-2 (2)] [Test: CA-2.2 - [Test: CA-2.2 - information system at the Security Assessments] Security organization-defined Assessments] frequency; Not Entered (iii) the organization produces Not Entered a security assessment report that documents the results of the security control assessment; and (iv) the results of the security control assessment are provided, in writing, to the authorizing official or authorizing official designated representative.
[E-# OR W-#] Security Assessments [NIST 800-53 w/ DHS 4300A CA-2 (2)] [Test: CA-2(2).1 - Specialized Assessments] Not Entered [Test: CA-2.2 - Security Assessments] Not Entered Failure to meet the security assessments requirements listed could weaken the overall security posture of the system: (i) the organization defines the frequency of assessing the security controls in the information system to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system; (ii) the organization assesses the security controls in the information system at the organization-defined frequency; (iii) the organization produces a security assessment report that documents the results of the security control assessment; and (iv) the results of the security control assessment are provided, in writing, to the authorizing official or authorizing official designated representative. High [Test: CA-2(2).1 - Specialized Assessments] Not Entered [Test: CA-2.2 - Security Assessments] Not Entered
Security%20Assessment%20Report%20Extensible.docx