services, and operations/processes. Failure to ensure that the information system protects the confidentiality and integrity of [Test: SC-28.1 - Protection of [Test: SC-28.1 - information at rest could risk Protection of [E-# OR Information at Rest Protection of the disclosure of sensitive High Information at Rest] W-#] [NIST 800-53 w/ Information at Rest] information or the disruption of DHS 4300A SC-28] critical mission/business Not Entered Not Entered functions, services, and operations/processes. Failure to meet the configuration management plan requirements listed below could weaken the overall security posture of the system: (i) the organization develops, documents, and implements a configuration management plan [Test: CM-9.1 - Configuration for the information system that: [Test: CM-9.1 - Configuration [E-# OR Management Plan Configuration High Management Plan] W-#] [NIST 800-53 w/ addresses Management Plan] DHS 4300A CM-9] responsibilities, and Not Entered configuration Not Entered management processes and procedures; defines the configuration items for the information system and when in the system development life cycle
services, and operations/processes. [E-# OR W-#] Protection of Information at Rest [NIST 800-53 w/ DHS 4300A SC-28] [Test: SC-28.1 - Protection of Information at Rest] Not Entered Failure to ensure that the information system protects the confidentiality and integrity of information at rest could risk the disclosure of sensitive information or the disruption of critical mission/business functions, services, and operations/processes. High [Test: SC-28.1 - Protection of Information at Rest] Not Entered [E-# OR W-#] Configuration Management Plan [NIST 800-53 w/ DHS 4300A CM-9] [Test: CM-9.1 - Configuration Management Plan] Not Entered Failure to meet the configuration management plan requirements listed below could weaken the overall security posture of the system: (i) the organization develops, documents, and implements a configuration management plan for the information system that: addresses responsibilities, and configuration management processes and procedures; defines the configuration items for the information system and when in the system development life cycle High [Test: CM-9.1 - Configuration Management Plan] Not Entered
Security%20Assessment%20Report%20Extensible.docx