(iii) the organization includes Privacy Act Statements on its forms that collect PII, or on separate forms that can be retained by individuals, to provide additional formal notice to individuals from whom the information is being collected. Failure to ensure that the organization employs and maintains fire suppression and [Test: PE-13.1 - Fire Fire Protection detection devices/systems for [E-# OR [Test: PE-13.1 - Fire Protection] [NIST 800-53 w/ the information system that are High W-#] Protection] DHS 4300A PE-13] supported by an independent Not Entered energy source lead to the Not Entered disruption of critical mission/business operations. Failure to meet the contingency plan requirements listed below could leave the organization unprepared for any incident [Test: CP-2.1 - [Test: CP-2.1 - when it occurs due to Contingency Plan] Contingency Plan] incomplete or inaccurate plan Contingency Plan and procedures, which could Not Entered [E-# OR [NIST 800-53 w/ Not Entered lead to the compromise of the High W-#] DHS 4300A CP-2] system or of the data in the [Test: CP-2.2 - [Test: CP-2.2 - system: Contingency Plan] Contingency Plan] (i) the organization coordinates Not Entered Not Entered contingency planning activities with incident handling activities:
(iii) the organization includes Privacy Act Statements on its forms that collect PII, or on separate forms that can be retained by individuals, to provide additional formal notice to individuals from whom the information is being collected. [E-# OR W-#] Fire Protection [NIST 800-53 w/ DHS 4300A PE-13] [Test: PE-13.1 - Fire Protection] Not Entered Failure to ensure that the organization employs and maintains fire suppression and detection devices/systems for the information system that are supported by an independent energy source lead to the disruption of critical mission/business operations. High [Test: PE-13.1 - Fire Protection] Not Entered [E-# OR W-#] Contingency Plan [NIST 800-53 w/ DHS 4300A CP-2] [Test: CP-2.1 - Contingency Plan] Not Entered [Test: CP-2.2 - Contingency Plan] Not Entered Failure to meet the contingency plan requirements listed below could leave the organization unprepared for any incident when it occurs due to incomplete or inaccurate plan and procedures, which could lead to the compromise of the system or of the data in the system: (i) the organization coordinates contingency planning activities with incident handling activities: High [Test: CP-2.1 - Contingency Plan] Not Entered [Test: CP-2.2 - Contingency Plan] Not Entered
Security%20Assessment%20Report%20Extensible.docx