disruption of critical mission/business functions, services, and operations/processes. Failure to ensure that the organization maintains Cryptographic Key availability of information in [Test: SC-12(1).1 - Establishment and [E-# OR [Test: SC-12(1).1 - the event of the loss of Availability] Management [NIST High W-#] Availability] cryptographic keys by users 800-53 w/ DHS could lead to the disclosure of Not Entered 4300A SC-12 (1)] Not Entered critical mission/business information/data. Failure to ensure that the Business Impact Assessments (BIA) are used to determine the level of risk introduced to the system by the IT supply chain [Test: Supply [Test: and whether the IT supply - Business Protection [NIST [E-# OR - Business chain threat introduces Impact 800-53 w/ DHS High W-#] Impact sufficient risk to require the Assessments(BIA)] 4300A SA-12 Assessments(BIA)] implementation of (DHS-5.8.a)] countermeasures could lead to Not Entered Not Entered disclosure of confidentiality, integrity, and availability standard as specified by the organization's policy. Failure to employ NIST-based Baseline [Test: security controls could make it Configuration [Test: - FIPS 199 and [E-# OR difficult for the organization to [NIST 800-53 w/ - FIPS 199 and High FIPS 200 Usage] W-#] determine appropriate levels of DHS 4300A CM-2 FIPS 200 Usage] protection for information all (DHS-3.9.b)] Not Entered systems. Not Entered
disruption of critical mission/business functions, services, and operations/processes. [E-# OR W-#] Cryptographic Key Establishment and Management [NIST 800-53 w/ DHS 4300A SC-12 (1)] [Test: SC-12(1).1 - Availability] Not Entered Failure to ensure that the organization maintains availability of information in the event of the loss of cryptographic keys by users could lead to the disclosure of critical mission/business information/data. High [Test: SC-12(1).1 - Availability] Not Entered [E-# OR W-#] Supply Protection [NIST 800-53 w/ DHS 4300A SA-12 (DHS-5.8.a)] [Test: - Business Impact Assessments(BIA)] Not Entered Failure to ensure that the Business Impact Assessments (BIA) are used to determine the level of risk introduced to the system by the IT supply chain and whether the IT supply chain threat introduces sufficient risk to require the implementation of countermeasures could lead to disclosure of confidentiality, integrity, and availability standard as specified by the organization's policy. High [Test: - Business Impact Assessments(BIA)] Not Entered [E-# OR W-#] Baseline Configuration [NIST 800-53 w/ DHS 4300A CM-2 (DHS-3.9.b)] [Test: - FIPS 199 and FIPS 200 Usage] Not Entered Failure to employ NIST-based security controls could make it difficult for the organization to determine appropriate levels of protection for information all systems. High [Test: - FIPS 199 and FIPS 200 Usage] Not Entered
Security%20Assessment%20Report%20Extensible.docx