organization-defined specifications. Failure to ensure that the organization tests, validates, Configuration and documents changes to the [Test: CM-3(2).1 - Change Control [Test: CM-3(2).1 - information system before Test / Validate / [E-# OR [NIST 800-53 w/ Test / Validate / implementing the changes on High Document Changes] W-#] DHS 4300A CM-3 Document Changes] the operational system could (2)] leave the system vulnerable to Not Entered Not Entered unexpected crashes or instability in operation. Failure to meet the baseline configuration requirements listed below could result in a system that is not properly configured or with a weak security stance, which could lead to the compromise of data or the system itself: [Test: CM-2(7).1 - Baseline [Test: CM-2(7).1 - Configure Systems, Configuration Configure Systems, (i) the organization issues Components, Or [E-# OR [NIST 800-53 w/ Components, Or information systems, system High Devices For W-#] DHS 4300A CM-2 Devices For components, or devices with Areas] (7)] Areas] secured configurations to individuals travelling to Not Entered Not Entered locations that the organization deems to be of significant risk; and, (ii) the organization applies security safeguards to the devices when the individuals return.
organization-defined specifications. [E-# OR W-#] Configuration Change Control [NIST 800-53 w/ DHS 4300A CM-3 (2)] [Test: CM-3(2).1 - Test / Validate / Document Changes] Not Entered Failure to ensure that the organization tests, validates, and documents changes to the information system before implementing the changes on the operational system could leave the system vulnerable to unexpected crashes or instability in operation. High [Test: CM-3(2).1 - Test / Validate / Document Changes] Not Entered [E-# OR W-#] Baseline Configuration [NIST 800-53 w/ DHS 4300A CM-2 (7)] [Test: CM-2(7).1 - Configure Systems, Components, Or Devices For Areas] Not Entered Failure to meet the baseline configuration requirements listed below could result in a system that is not properly configured or with a weak security stance, which could lead to the compromise of data or the system itself: (i) the organization issues information systems, system components, or devices with secured configurations to individuals travelling to locations that the organization deems to be of significant risk; and, (ii) the organization applies security safeguards to the devices when the individuals return. High [Test: CM-2(7).1 - Configure Systems, Components, Or Devices For Areas] Not Entered
Security%20Assessment%20Report%20Extensible.docx