and exploits identified with and inherent in malicious codes enabling any determined attacker or user to gain unauthorized access to the system, which could eventually Not Entered lead to the loss of sensitive information or to the disruption of critical mission/business functions, services, and operations/processes. Failure to terminate a user session when conditions or [Test: AC-12.1 - Session Termination trigger events have been [E-# OR [Test: AC-12.1 - Session Termination] [NIST 800-53 w/ detected could enable an High W-#] Session Termination] DHS 4300A AC-12] attacker to try and break into Not Entered the system and gain access to Not Entered classified information. Failure to ensure that the information system, in conjunction with a remote device, prevents the device [Test: SC-7(7).1 - Boundary [Test: SC-7(7).1 - from simultaneously Prevent Split [E-# OR Protection [NIST Prevent Split establishing non-remote Tunneling For High W-#] 800-53 w/ DHS Tunneling For connections with the system Remote Devices] 4300A SC-7 (7)] Remote Devices] and communicating via some connection to resources in Not Entered Not Entered external networks could leave the system vulnerable as targets for hackers. Failure to ensure that the [E-# OR Session [Test: SC-23.1 - information system protects the High W-#] Authenticity [NIST Session Authenticity] [Test: SC-23.1 - authenticity of communications
Not Entered and exploits identified with and inherent in malicious codes enabling any determined attacker or user to gain unauthorized access to the system, which could eventually lead to the loss of sensitive information or to the disruption of critical mission/business functions, services, and operations/processes. [E-# OR W-#] Session Termination [NIST 800-53 w/ DHS 4300A AC-12] [Test: AC-12.1 - Session Termination] Not Entered Failure to terminate a user session when conditions or trigger events have been detected could enable an attacker to try and break into the system and gain access to classified information. High [Test: AC-12.1 - Session Termination] Not Entered [E-# OR W-#] Boundary Protection [NIST 800-53 w/ DHS 4300A SC-7 (7)] [Test: SC-7(7).1 - Prevent Split Tunneling For Remote Devices] Not Entered Failure to ensure that the information system, in conjunction with a remote device, prevents the device from simultaneously establishing non-remote connections with the system and communicating via some connection to resources in external networks could leave the system vulnerable as targets for hackers. High [Test: SC-7(7).1 - Prevent Split Tunneling For Remote Devices] Not Entered [E-# OR W-#] Session Authenticity [NIST [Test: SC-23.1 - Failure to ensure that the information system protects the authenticity of communications High [Test: SC-23.1 - Session Authenticity]
Security%20Assessment%20Report%20Extensible.docx