Failure to conduct monthly audit reviews for financial Review, [Test: systems or PII-hosted systems Analysis, and [Test: - Audit Records could allow unauthorized [E-# OR Reporting [NIST - Audit for Financial Systems access to go unnoticed High W-#] 800-53 w/ DHS Records for Financial and PII] increasing the risk that 4300A AU-6 Systems and PII] unauthorized persons could Not Entered gain access to sensitive Not Entered information. Failure to meet the requirements for configuration settings listed below could lead to the compromise of the system or of the data in the system: (i) the organization does not authorize Telnet connections to any DHS computer; Configuration [Test: Settings [NIST [Test: - Use of [E-# OR (ii) the organization uses w/ DHS - Use of High Telnet] W-#] Secure Shell (SSH) connection CM-6 Telnet] protocols duly approved by the Not Entered Component; and Not Entered (iii) the SSH employ any of the following secure authentication methods: two factor encrypted key exchange
[E-# OR W-#] Review, Analysis, and Reporting [NIST 800-53 w/ DHS 4300A AU-6 [Test: - Audit Records for Financial Systems and PII] Not Entered Failure to conduct monthly audit reviews for financial systems or PII-hosted systems could allow unauthorized access to go unnoticed increasing the risk that unauthorized persons could gain access to sensitive information. High [Test: - Audit Records for Financial Systems and PII] Not Entered [E-# OR W-#] Configuration Settings [NIST w/ DHS CM-6 [Test: - Use of Telnet] Not Entered Failure to meet the requirements for configuration settings listed below could lead to the compromise of the system or of the data in the system: (i) the organization does not authorize Telnet connections to any DHS computer; (ii) the organization uses Secure Shell (SSH) connection protocols duly approved by the Component; and (iii) the SSH employ any of the following secure authentication methods: two factor encrypted key exchange High [Test: - Use of Telnet] Not Entered
Security%20Assessment%20Report%20Extensible.docx