Failure to ensure that the organization handles and retains information within the information system and information output from the system in accordance with applicable federal laws, Information Output Executive Orders, directives, [Test: SI-12.1 - Handling and [Test: SI-12.1 - policies, regulations, standards, Information Handling [E-# OR Retention [NIST Information Handling and operational requirements High and Retention] W-#] 800-53 w/ DHS and Retention] could result in the disclosure of 4300A SI-12] critical/sensitive information or Not Entered Not Entered data, which could eventually lead to the loss of organizational assets or to the disruption of critical mission/business functions, services, and operations/processes. Failure to and/or monitor all government office equipment and DHS systems/computers using the criteria below could allow [Test: System Use [Test: unauthorized activities - Notification [NIST [E-# OR - (including insider threat) and Governement Funded 800-53 w/ DHS High W-#] Governement Funded other form of intrusions to go Office Equipment] AC-8 Office Equipment] undetected. Not Entered Not Entered Monitoring criteria: (a) Tracking of internal and external transactions (e.g. Internet access).
[E-# OR W-#] Information Output Handling and Retention [NIST 800-53 w/ DHS 4300A SI-12] [Test: SI-12.1 - Information Handling and Retention] Not Entered Failure to ensure that the organization handles and retains information within the information system and information output from the system in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and operational requirements could result in the disclosure of critical/sensitive information or data, which could eventually lead to the loss of organizational assets or to the disruption of critical mission/business functions, services, and operations/processes. High [Test: SI-12.1 - Information Handling and Retention] Not Entered [E-# OR W-#] System Use Notification [NIST 800-53 w/ DHS AC-8 [Test: - Governement Funded Office Equipment] Not Entered Failure to and/or monitor all government office equipment and DHS systems/computers using the criteria below could allow unauthorized activities (including insider threat) and other form of intrusions to go undetected. Monitoring criteria: (a) Tracking of internal and external transactions (e.g. Internet access). High [Test: - Governement Funded Office Equipment] Not Entered
Security%20Assessment%20Report%20Extensible.docx