information systems or system components using organization-defined security safeguards could result in the Not Entered disclosure of critical and sensitive mission/business information that may have been contained in the media. Failure to ensure that the information system maintains a separate execution domain for [Test: SC-39.1 - Process Isolation [E-# OR [Test: SC-39.1 - each executing process could Process Isolation] [NIST 800-53 w/ High W-#] Process Isolation] leave the system vulnerable to DHS SC-39] improper utilization of Not Entered Not Entered resources due to unmonitored activity of access. Failure to prevent DHS users to Sharing of Personal [Test: share personal passwords could Passwords [NIST [Test: - Sharing of [E-# OR leave the information system 800-53 w/ DHS - Sharing of High Personal Passwords] W-#] vulnerable to unauthorized 4300A AC-1 Personal Passwords] access, impersonation, and Not Entered brute force attacks. Not Entered Failure to meet the privacy control requirements for collecting PIIs listed below Authority to Collect could lead to unauthorized [Test: AP-1.1 - [E-# OR [NIST 800-53 w/ [Test: AP-1.1 - disclosure of personal Authority to Collect] High W-#] DHS 4300A Authority to Collect] identifiable information: Not Entered Not Entered (i) the organization identifies the legal bases that authorize a particular personally
Not Entered information systems or system components using organization-defined security safeguards could result in the disclosure of critical and sensitive mission/business information that may have been contained in the media. [E-# OR W-#] Process Isolation [NIST 800-53 w/ DHS SC-39] [Test: SC-39.1 - Process Isolation] Not Entered Failure to ensure that the information system maintains a separate execution domain for each executing process could leave the system vulnerable to improper utilization of resources due to unmonitored activity of access. High [Test: SC-39.1 - Process Isolation] Not Entered [E-# OR W-#] Sharing of Personal Passwords [NIST 800-53 w/ DHS 4300A AC-1 [Test: - Sharing of Personal Passwords] Not Entered Failure to prevent DHS users to share personal passwords could leave the information system vulnerable to unauthorized access, impersonation, and brute force attacks. High [Test: - Sharing of Personal Passwords] Not Entered [E-# OR W-#] Authority to Collect [NIST 800-53 w/ DHS 4300A [Test: AP-1.1 - Authority to Collect] Not Entered Failure to meet the privacy control requirements for collecting PIIs listed below could lead to unauthorized disclosure of personal identifiable information: (i) the organization identifies the legal bases that authorize a particular personally High [Test: AP-1.1 - Authority to Collect] Not Entered
Security%20Assessment%20Report%20Extensible.docx