organization operations, functions and services. Failure to meet the security requirements listed below could lead to compromise of the system or of the data in the system: [Test: Information System [Test: (i) the organization maintains - DHS Connections [NIST [E-# OR - DHS Interconnection Security OneNet 800-53 w/ DHS High W-#] OneNet Agreements (ISAs) for all Interconnections] 4300A CA-3 Interconnections] connections between systems that do not have the same Not Entered Not Entered security policy; and, (ii) the ISAs are authorized by the DHS OneNet Authorizing Officer. Failure to ensure that the contractor information system services and operations adhere to all applicable DHS [Test: System and Services [Test: information security policies - Contractor Acquisition Policy - Contractor could result in the loss of Information System [E-# OR and Procedures Information System system integrity and stability, High Services and W-#] [NIST 800-53 w/ Services and which could lead to the Operations] DHS 4300A SA-1 Operations] disclosure of sensitive (DHS-3.3.b)] information or to the disruption Not Entered Not Entered of critical mission/business functions, services, and operations/processes. [E-# OR Position Failure to meet the position risk [Test: PS-2.1 - High W-#] Categorization designation requirements Position Risk
organization operations, functions and services. [E-# OR W-#] Information System Connections [NIST 800-53 w/ DHS 4300A CA-3 [Test: - DHS OneNet Interconnections] Not Entered Failure to meet the security requirements listed below could lead to compromise of the system or of the data in the system: (i) the organization maintains Interconnection Security Agreements (ISAs) for all connections between systems that do not have the same security policy; and, (ii) the ISAs are authorized by the DHS OneNet Authorizing Officer. High [Test: - DHS OneNet Interconnections] Not Entered [E-# OR W-#] System and Services Acquisition Policy and Procedures [NIST 800-53 w/ DHS 4300A SA-1 (DHS-3.3.b)] [Test: - Contractor Information System Services and Operations] Not Entered Failure to ensure that the contractor information system services and operations adhere to all applicable DHS information security policies could result in the loss of system integrity and stability, which could lead to the disclosure of sensitive information or to the disruption of critical mission/business functions, services, and operations/processes. High [Test: - Contractor Information System Services and Operations] Not Entered [E-# OR W-#] Position Categorization Failure to meet the position risk designation requirements High [Test: PS-2.1 - Position Risk
Security%20Assessment%20Report%20Extensible.docx