Failure to ensure that the organization defines, [Test: documents, approves, and Configuration [Test: - Network enforces physical and logical Settings [NIST - Network Printers, Copiers, and [E-# OR access restrictions associated w/ DHS 4300A Printers, Copiers, and High Facsimile W-#] with changes to network CM-6 Facsimile Administration] printers, copiers, and facsimile Administration] machines could lead to the Not Entered compromise of the system or of Not Entered the data in the system. Failure of the components to identify the countermeasures to denial-of-service attacks and [Test: Denial-of-Service complete a risk based [Test: - Denial of Protection [NIST evaluation prior to approving [E-# OR - Denial of Service 800-53 w/ DHS the use of a wireless PED could High W-#] Service countermeasures] SC-5 result in non-secure system that countermeasures] lacks stability and integrity Not Entered causing the unavailability of Not Entered the system or the data in the system to authorized users. Failure to meet the plan of action and milestones requirements listed exposes the system to security [Test: Plan of Action and [Test: threats due to security holes - DHS Milestones [NIST [E-# OR - DHS that could have been patched in POA&M 800-53 w/ DHS High W-#] POA&M a timely manner, which could Requirements] 4300A CA-5 Requirements] eventually lead to the compromise of the system or of Not Entered Not Entered the data in the system: (i) the organization develops a
[E-# OR W-#] Configuration Settings [NIST w/ DHS 4300A CM-6 [Test: - Network Printers, Copiers, and Facsimile Administration] Not Entered Failure to ensure that the organization defines, documents, approves, and enforces physical and logical access restrictions associated with changes to network printers, copiers, and facsimile machines could lead to the compromise of the system or of the data in the system. High [Test: - Network Printers, Copiers, and Facsimile Administration] Not Entered [E-# OR W-#] Denial-of-Service Protection [NIST 800-53 w/ DHS SC-5 [Test: - Denial of Service countermeasures] Not Entered Failure of the components to identify the countermeasures to denial-of-service attacks and complete a risk based evaluation prior to approving the use of a wireless PED could result in non-secure system that lacks stability and integrity causing the unavailability of the system or the data in the system to authorized users. High [Test: - Denial of Service countermeasures] Not Entered [E-# OR W-#] Plan of Action and Milestones [NIST 800-53 w/ DHS 4300A CA-5 [Test: - DHS POA&M Requirements] Not Entered Failure to meet the plan of action and milestones requirements listed exposes the system to security threats due to security holes that could have been patched in a timely manner, which could eventually lead to the compromise of the system or of the data in the system: (i) the organization develops a High [Test: - DHS POA&M Requirements] Not Entered
Security%20Assessment%20Report%20Extensible.docx