the security plan for the system are enforced. Failure of the organization to employ an independent certification agent or certification team to monitor [Test: CA-7(1).1 - Continuous [Test: CA-7(1).1 - the security controls in the Independent [E-# OR Monitoring [NIST Independent information system on an High Assessment] W-#] 800-53 w/ DHS Assessment] ongoing basis could render the 4300A CA-7 (1)] security controls useless if Not Entered Not Entered there would be bias in the monitoring of the in-house agent or team. Failure of the information system to provide the capability to centrally manage the content of records generated from multiple components throughout the system could lead to the [Test: AU-3(2).1 - untimely detection of any [Test: AU-3(2).1 - Centralized Content of Audit attack on the system: Centralized Management Of [E-# OR Records [NIST Management Of High Planned Audit Record W-#] w/ DHS 4300A (i) the organization defines the Planned Audit Content] AU-3 (2)] information system Record Content] components for which the Not Entered content of audit records Not Entered generated is centrally managed; and, (ii) the organization centrally manages the content of audit records generated by organization-defined
the security plan for the system are enforced. [E-# OR W-#] Continuous Monitoring [NIST 800-53 w/ DHS 4300A CA-7 (1)] [Test: CA-7(1).1 - Independent Assessment] Not Entered Failure of the organization to employ an independent certification agent or certification team to monitor the security controls in the information system on an ongoing basis could render the security controls useless if there would be bias in the monitoring of the in-house agent or team. High [Test: CA-7(1).1 - Independent Assessment] Not Entered [E-# OR W-#] Content of Audit Records [NIST w/ DHS 4300A AU-3 (2)] [Test: AU-3(2).1 - Centralized Management Of Planned Audit Record Content] Not Entered Failure of the information system to provide the capability to centrally manage the content of records generated from multiple components throughout the system could lead to the untimely detection of any attack on the system: (i) the organization defines the information system components for which the content of audit records generated is centrally managed; and, (ii) the organization centrally manages the content of audit records generated by organization-defined High [Test: AU-3(2).1 - Centralized Management Of Planned Audit Record Content] Not Entered
Security%20Assessment%20Report%20Extensible.docx