(i) the organization establishes usage restrictions and implementation guidance for organization-controlled portable and mobile devices; and, Not Entered (ii) the organization authorizes connection of mobile devices meeting organizational usage restrictions and implementation guidance to organizational information systems; Failure to meet the contingency planning policy and procedures requirements listed could leave the organization unprepared for any incident [Test: CP-1.1 - [Test: CP-1.1 - when it occurs due to Contingency Planning Contingency incomplete or inaccurate plan Policy and Planning Policy and and procedures, which could Procedures] Contingency Procedures] lead to the compromise of the Planning Policy and system or of the data in the Not Entered [E-# OR Procedures [NIST Not Entered system: High W-#] 800-53 w/ DHS [Test: CP-1.2 - CP-1] [Test: CP-1.2 - (i) the organization defines the Contingency Planning Contingency frequency of contingency Policy and Planning Policy and planning policy Procedures] Procedures] reviews/updates; (ii) the organization Not Entered Not Entered reviews/updates contingency planning policy in accordance with organization-defined frequency;
Not Entered (i) the organization establishes usage restrictions and implementation guidance for organization-controlled portable and mobile devices; and, (ii) the organization authorizes connection of mobile devices meeting organizational usage restrictions and implementation guidance to organizational information systems; [E-# OR W-#] Contingency Planning Policy and Procedures [NIST 800-53 w/ DHS CP-1] [Test: CP-1.1 - Contingency Planning Policy and Procedures] Not Entered [Test: CP-1.2 - Contingency Planning Policy and Procedures] Not Entered Failure to meet the contingency planning policy and procedures requirements listed could leave the organization unprepared for any incident when it occurs due to incomplete or inaccurate plan and procedures, which could lead to the compromise of the system or of the data in the system: (i) the organization defines the frequency of contingency planning policy reviews/updates; (ii) the organization reviews/updates contingency planning policy in accordance with organization-defined frequency; High [Test: CP-1.1 - Contingency Planning Policy and Procedures] Not Entered [Test: CP-1.2 - Contingency Planning Policy and Procedures] Not Entered
Security%20Assessment%20Report%20Extensible.docx