environments; (ii) the Program Manager may delegate this authority to another DHS employee in writing and the authority is not delegated to contractor personnel. Failure to meet the security authorization requirements listed could lead to compromise of the system or of the data in the system: (i) the components authorize Security [Test: systems at Initial Operating Authorization [Test: - DHS Security [E-# OR Capability, every three (3) [NIST 800-53 w/ - DHS Security High Authorization] W-#] years after, or whenever major DHS 4300A CA-6 Authorization] changes occurs; and (DHS-3.9.h)] Not Entered Not Entered (ii) an Authority to Operate (ATO) of six (6) months or less receives an ATO authorization period waiver from the DHS CISO before submission to the AO for the final decision. Failure to meet the workstation's baseline [Test: Configuration configuration requirements [Test: - [E-# OR Settings [NIST listed below could result in a - USGCB High Requirements] W-#] w/ DHS 4300A weak security stance of the Requirements] CM-6 (DHS-3.7.e)] organization due to the Not Entered untimely detection of Not Entered misconfigured systems or of
environments; (ii) the Program Manager may delegate this authority to another DHS employee in writing and the authority is not delegated to contractor personnel. [E-# OR W-#] Security Authorization [NIST 800-53 w/ DHS 4300A CA-6 (DHS-3.9.h)] [Test: - DHS Security Authorization] Not Entered Failure to meet the security authorization requirements listed could lead to compromise of the system or of the data in the system: (i) the components authorize systems at Initial Operating Capability, every three (3) years after, or whenever major changes occurs; and (ii) an Authority to Operate (ATO) of six (6) months or less receives an ATO authorization period waiver from the DHS CISO before submission to the AO for the final decision. High [Test: - DHS Security Authorization] Not Entered [E-# OR W-#] Configuration Settings [NIST w/ DHS 4300A CM-6 (DHS-3.7.e)] [Test: - USGCB Requirements] Not Entered Failure to meet the workstation's baseline configuration requirements listed below could result in a weak security stance of the organization due to the untimely detection of misconfigured systems or of High [Test: - Requirements] Not Entered
Security%20Assessment%20Report%20Extensible.docx