to any attacker or malicious user gaining unauthorized access to or elevated privileges Not Entered Not Entered on the system or the data. Failure to meet the time requirements listed below could lead to compromise of the system or of the data in the system: (i) the information system uses internal system clocks to [Test: AU-8.1 - Time Time Stamps [NIST generate time stamps for audit [E-# OR [Test: AU-8.1 - Time Stamps] 800-53 w/ DHS records; High W-#] Stamps] 4300A AU-8] (ii) the information system Not Entered generates time in the time Not Entered stamps that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT); and, (iii) the organization defines different time granularities for different system components. Failure of the information system to employ authentication methods that [Test: IA-7.1 - Cryptographic [Test: IA-7.1 - meet the requirements of Cryptographic Module [E-# OR Cryptographic applicable laws, Executive Module Authentication High W-#] Module Orders, directives, policies, Authentication] [NIST 800-53 w/ Authentication] regulations, standards, and DHS 4300A IA-7] guidance for authentication to a Not Entered Not Entered cryptographic module (for national security systems, the
Not Entered to any attacker or malicious user gaining unauthorized access to or elevated privileges on the system or the data. Not Entered [E-# OR W-#] Time Stamps [NIST 800-53 w/ DHS 4300A AU-8] [Test: AU-8.1 - Time Stamps] Not Entered Failure to meet the time requirements listed below could lead to compromise of the system or of the data in the system: (i) the information system uses internal system clocks to generate time stamps for audit records; (ii) the information system generates time in the time stamps that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT); and, (iii) the organization defines different time granularities for different system components. High [Test: AU-8.1 - Time Stamps] Not Entered [E-# OR W-#] Cryptographic Module Authentication [NIST 800-53 w/ DHS 4300A IA-7] [Test: IA-7.1 - Cryptographic Module Authentication] Not Entered Failure of the information system to employ authentication methods that meet the requirements of applicable laws, Executive Orders, directives, policies, regulations, standards, and guidance for authentication to a cryptographic module (for security systems, the High [Test: IA-7.1 - Cryptographic Module Authentication] Not Entered national
Security%20Assessment%20Report%20Extensible.docx