[Test: that only authorized individuals - Video Teleconference [NIST 800-53 w/ are able to participate in each Teleconference Protections] DHS 4300A SC-15 videoconference could allow Protections] (DHS-4.5.3.a)] the disclosure of critical DHS Not Entered information. Not Entered Failure to ensure that DHS [Test: Malicious Code gateway Steward provides [Test: - Protection [NIST email monitoring for malware [E-# OR - Email Monitoring for 800-53 w/ DHS activity at the gateway could High W-#] Monitoring for Malware] 4300A SI-3 result in difficulty in audit and Malware] in investigation if an intrusion Not Entered occurs. Not Entered Failure to ensure that components use only Use of cryptographic modules that [Test: Cryptography [Test: meet the requirements set - Cryptography [E-# OR [NIST 800-53 w/ - Cryptography in Section 5.5, Cryptography High Requirements] W-#] DHS 4300A SC-13 Requirements] could lead to the DHS to face (DHS-5.7.d)] litigations because of offenses Not Entered Not Entered related to non-compliance of these premises. Failure to apply Identification and requirements for Authentication systems that allow online [Test: Policy and [Test: transactions could allow the - Online [E-# OR Procedures [NIST - Online system to become vulnerable to High Transactions] W-#] 800-53 w/ DHS Transactions] external attacks or 4300A IA-1 unauthorized access. Data Not Entered Not Entered availability and/or integrity can be affected.
[NIST 800-53 w/ DHS 4300A SC-15 (DHS-4.5.3.a)] [Test: - Video Teleconference Protections] Not Entered that only authorized individuals are able to participate in each videoconference could allow the disclosure of critical DHS information. Teleconference Protections] Not Entered [E-# OR W-#] Malicious Code Protection [NIST 800-53 w/ DHS 4300A SI-3 [Test: - Email Monitoring for Malware] Not Entered Failure to ensure that DHS gateway Steward provides email monitoring for malware activity at the gateway could result in difficulty in audit and in investigation if an intrusion occurs. High [Test: - Monitoring for Malware] Not Entered [E-# OR W-#] Use of Cryptography [NIST 800-53 w/ DHS 4300A SC-13 (DHS-5.7.d)] [Test: - Cryptography Requirements] Not Entered Failure to ensure that components use only cryptographic modules that meet the requirements set in Section 5.5, Cryptography could lead to the DHS to face litigations because of offenses related to non-compliance of these premises. High [Test: - Cryptography Requirements] Not Entered [E-# OR W-#] Identification and Authentication Policy and Procedures [NIST 800-53 w/ DHS 4300A IA-1 [Test: - Online Transactions] Not Entered Failure to apply requirements for systems that allow online transactions could allow the system to become vulnerable to external attacks or unauthorized access. Data availability and/or integrity can be affected. High [Test: - Online Transactions] Not Entered
Security%20Assessment%20Report%20Extensible.docx