Failure to meet the DHS FPKI requirements listed could lead to non-compliance with the organization's policies, procedures, privacy requirements, agreements or contracts: System and (i) the organization ensures that Communications every human subscriber has [Test: Protection Policy [E-# OR [Test: read, understand, and signed a - DHS FPKI] and Procedures High W-#] - DHS FPKI] PKI Human Subscriber “DHS [NIST 800-53 w/ Acknowledgement of Not Entered DHS 4300A SC-1 Not Entered Responsibilities” as a (DHS-5.5.3.j)] for receiving certificates from a DHS CA; and (ii) the organization ensures that all signed PKI Human Subscriber Agreements are maintained by the DHS PKI Registrar. Failure of the component CISOs /ISSMs to ensure that their information systems [Test: System and Services [Test: comply with the DHS - DHS Acquisition Policy - DHS Enterprise Architecture (EA) Enterprise [E-# OR and Procedures Enterprise Technical Reference model High Architecture and W-#] [NIST 800-53 w/ Architecture and (TRM) and Security Security Architecture] DHS 4300A SA-1 Security Architecture (SA) or maintain a (DHS-3.1.g)] Architecture] waiver, approved by the DHS Not Entered CIO/CISO could result in the Not Entered acquisition of a system/service
[E-# OR W-#] System and Communications Protection Policy and Procedures [NIST 800-53 w/ DHS 4300A SC-1 (DHS-5.5.3.j)] [Test: - DHS FPKI] Not Entered Failure to meet the DHS FPKI requirements listed could lead to non-compliance with the organization's policies, procedures, privacy requirements, agreements or contracts: (i) the organization ensures that every human subscriber has read, understand, and signed a “DHS PKI Human Subscriber Acknowledgement of Responsibilities” as a for receiving certificates from a DHS CA; and (ii) the organization ensures that all signed PKI Human Subscriber Agreements are maintained by the DHS PKI Registrar. High [Test: - DHS FPKI] Not Entered [E-# OR W-#] System and Services Acquisition Policy and Procedures [NIST 800-53 w/ DHS 4300A SA-1 (DHS-3.1.g)] [Test: - DHS Enterprise Architecture and Security Architecture] Not Entered Failure of the component CISOs /ISSMs to ensure that their information systems comply with the DHS Enterprise Architecture (EA) Technical Reference model (TRM) and Security Architecture (SA) or maintain a waiver, approved by the DHS CIO/CISO could result in the acquisition of a system/service High [Test: - DHS Enterprise Architecture and Security Architecture] Not Entered
Security%20Assessment%20Report%20Extensible.docx