development and improvement program result in the disclosure of critical/sensitive Information Security information or data, which DHS 4300A Workforce] could eventually lead to the loss of organizational assets or Not Entered Not Entered to the disruption of critical mission/business functions, services, and operations/processes. Failure to meet the access control policy and procedures requirements listed below could result in a weaker organizational structure where the policy conflicts with the [Test: AC-1.1 - trust, accountabilities, entities, [Test: AC-1.1 - Access Control interests, and requirements of Access Control Policy Policy and the organization, which could and Procedures] Access Control Procedures] lead to a weaker security Policy and posture enabling prospecting Not Entered [E-# OR Procedures [NIST Not Entered intruders to take advantage of High W-#] 800-53 w/ DHS the probable confusion and [Test: AC-1.2 - 4300A AC-1] [Test: AC-1.2 - conflict brought about by an Access Control Policy Access Control inadequate access control and Procedures] Policy and policy: Procedures] Not Entered (i) the organization defines the Not Entered frequency of access control policy reviews/updates; (ii) the organization reviews/updates access control policy in accordance with
DHS 4300A Information Security Workforce] Not Entered development and improvement program result in the disclosure of critical/sensitive information or data, which could eventually lead to the loss of organizational assets or to the disruption of critical mission/business functions, services, and operations/processes. Not Entered [E-# OR W-#] Access Control Policy and Procedures [NIST 800-53 w/ DHS 4300A AC-1] [Test: AC-1.1 - Access Control Policy and Procedures] Not Entered [Test: AC-1.2 - Access Control Policy and Procedures] Not Entered Failure to meet the access control policy and procedures requirements listed below could result in a weaker organizational structure where the policy conflicts with the trust, accountabilities, entities, interests, and requirements of the organization, which could lead to a weaker security posture enabling prospecting intruders to take advantage of the probable confusion and conflict brought about by an inadequate access control policy: (i) the organization defines the frequency of access control policy reviews/updates; (ii) the organization reviews/updates access control policy in accordance with High [Test: AC-1.1 - Access Control Policy and Procedures] Not Entered [Test: AC-1.2 - Access Control Policy and Procedures] Not Entered
Security%20Assessment%20Report%20Extensible.docx