associated security planning roles and responsibilities. Failure of the information system to obscure feedback of authentication information during the authentication [Test: IA-6.1 - Authenticator [Test: IA-6.1 - process to protect the Authenticator [E-# OR Feedback [NIST Authenticator information from possible High Feedback] W-#] 800-53 w/ DHS Feedback] exploitation/use by IA-6] unauthorized individuals could Not Entered Not Entered lead to the compromise of the system or of the data in the system. Failure to ensure that the organization develops and [Test: PM-5.1 - Information System maintains an inventory of its [Test: PM-5.1 - Information System [E-# OR Inventory [NIST information systems could risk Information System High Inventory] W-#] 800-53 w/ DHS the exposure of essential Inventory] 4300A PM-5] information compromising the Not Entered confidentiality, integrity and Not Entered availability of the system. Failure to ensure that the organization defines digital and [Test: MP-2.1 - Media Media Access non-digital requiring [E-# OR [Test: MP-2.1 - Access] [NIST 800-53 w/ restricted access to authorized High W-#] Media Access] DHS 4300A MP-2] individuals could lead to the Not Entered compromise of the system or of Not Entered the data in the system. Failure to meet the account [Test: AC-2.1 - Account management requirements Account [E-# OR Management [NIST [Test: AC-2.1 - listed below could enable an High Management] W-#] 800-53 w/ DHS Account intruder to gain access to a 4300A AC-2] Management] system account through social Not Entered
associated security planning roles and responsibilities. [E-# OR W-#] Authenticator Feedback [NIST 800-53 w/ DHS IA-6] [Test: IA-6.1 - Authenticator Feedback] Not Entered Failure of the information system to obscure feedback of authentication information during the authentication process to protect the information from possible exploitation/use by unauthorized individuals could lead to the compromise of the system or of the data in the system. High [Test: IA-6.1 - Authenticator Feedback] Not Entered [E-# OR W-#] Information System Inventory [NIST 800-53 w/ DHS 4300A PM-5] [Test: PM-5.1 - Information System Inventory] Not Entered Failure to ensure that the organization develops and maintains an inventory of its information systems could risk the exposure of essential information compromising the confidentiality, integrity and availability of the system. High [Test: PM-5.1 - Information System Inventory] Not Entered [E-# OR W-#] Media Access [NIST 800-53 w/ DHS 4300A MP-2] [Test: MP-2.1 - Media Access] Not Entered Failure to ensure that the organization defines digital and non-digital requiring restricted access to authorized individuals could lead to the compromise of the system or of the data in the system. High [Test: MP-2.1 - Media Access] Not Entered [E-# OR W-#] Account Management [NIST 800-53 w/ DHS 4300A AC-2] [Test: AC-2.1 - Account Management] Failure to meet the account management requirements listed below could enable an intruder to gain access to a system account through social High [Test: AC-2.1 - Account Management] Not Entered
Security%20Assessment%20Report%20Extensible.docx