use of removable media with sensitive information have been addressed; (ii) all downloads follow the concept of least privilege and are documented with the Security Plan. Failure to disable the inbound dial-in capabilities of any multifunction device when [Test: Configuration [Test: connected to a DHS network or - Multifunction [E-# OR Settings [NIST - other IS containing sensitive High Device Configuration] W-#] w/ DHS 4300A Multifunction Device data may result in unauthorized CM-6 (DHS-4.12.j)] Configuration] personnel gaining access and Not Entered compromising or corrupting Not Entered data. Failure to ensure that the commercial products used by DHS and applications developed by DHS that enable the use of PKI are at a [Test: minimum support the following Use of [Test: - cryptographic algorithms and Cryptography - [E-# OR Cryptography for associated key sizes could [NIST 800-53 w/ Cryptography for High W-#] Commerical Products] cause the organization to face DHS 4300A SC-13 Commerical litigations because of offenses (DHS-5.5.2.v)] Products] Not Entered to non-compliance of these premises: Not Entered SHA 1 SHA 256
use of removable media with sensitive information have been addressed; (ii) all downloads follow the concept of least privilege and are documented with the Security Plan. [E-# OR W-#] Configuration Settings [NIST w/ DHS 4300A CM-6 (DHS-4.12.j)] [Test: - Multifunction Device Configuration] Not Entered Failure to disable the inbound dial-in capabilities of any multifunction device when connected to a DHS network or other IS containing sensitive data may result in unauthorized personnel gaining access and compromising or corrupting data. High [Test: - Multifunction Device Configuration] Not Entered [E-# OR W-#] Use of Cryptography [NIST 800-53 w/ DHS 4300A SC-13 (DHS-5.5.2.v)] [Test: - Cryptography for Commerical Products] Not Entered Failure to ensure that the commercial products used by DHS and applications developed by DHS that enable the use of PKI are at a minimum support the following cryptographic algorithms and associated key sizes could cause the organization to face litigations because of offenses to non-compliance of these premises: SHA 1 SHA 256 High [Test: - Cryptography for Commerical Products] Not Entered
Security%20Assessment%20Report%20Extensible.docx