document proposed changes to the information system; notify designated approval authorities; highlight approvals that have not been received by the time period; inhibit change designated approvals are received; and document completed changes to the information system. Failure to ensure that the information system fails Boundary [Test: SC-7(18).1 - securely in the event of an [E-# OR Protection [NIST [Test: SC-7(18).1 - Fail Secure] operational failure of a High W-#] 800-53 w/ DHS Fail Secure] boundary protection device 4300A SC-7 (18)] Not Entered could allow a hacker to gain Not Entered control over an application. Failure of the information system to provide the Audit Reduction capability to automatically [Test: AU-7(1).1 - and Report [Test: AU-7(1).1 - process audit records for events Automatic [E-# OR Generation [NIST Automatic of interest based upon High Processing] W-#] 800-53 w/ DHS Processing] selectable event criteria could 4300A AU-7 (1)] lead to the inability to track in a Not Entered Not Entered timely manner any attack on the system or data.
document proposed changes to the information system; notify designated approval authorities; highlight approvals that have not been received by the time period; inhibit change designated approvals are received; and document completed changes to the information system. [E-# OR W-#] Boundary Protection [NIST 800-53 w/ DHS 4300A SC-7 (18)] [Test: SC-7(18).1 - Fail Secure] Not Entered Failure to ensure that the information system fails securely in the event of an operational failure of a boundary protection device could allow a hacker to gain control over an application. High [Test: SC-7(18).1 - Fail Secure] Not Entered [E-# OR W-#] Audit Reduction and Report Generation [NIST 800-53 w/ DHS 4300A AU-7 (1)] [Test: AU-7(1).1 - Automatic Processing] Not Entered Failure of the information system to provide the capability to automatically process audit records for events of interest based upon selectable event criteria could lead to the inability to track in a timely manner any attack on the system or data. High [Test: AU-7(1).1 - Automatic Processing] Not Entered
Security%20Assessment%20Report%20Extensible.docx