investigations and clearances, and facility security. Failure to ensure that the Identification and information system conforms Authentication [Test: IA-8(4).1 - Use to FICAM-issued profiles [Test: IA-8(4).1 - Use Of [E-# OR could weaken its security Of Ficam-Issued High Profiles] W-#] posture, resulting to the Users) [NIST Profiles] ineffectiveness of the w/ DHS 4300A Not Entered identification and IA-8 (4)] Not Entered authentication policy. Failure to meet the requirements could lead to ineffectively remediate information security weaknesses: (i) Information Assurance (IA) is considered a requirement for System and all systems used to input, [Test: Communications process, store, display, or [Test: - Information Protection Policy transmits sensitive or [E-# OR - Information Assurance and Procedures security information. High W-#] Assurance Considerations] [NIST 800-53 w/ (ii) IA is achieved through the Considerations] DHS 4300A SC-1 acquisition and appropriate Not Entered (DHS-5.7.a)] implementation of evaluated or Not Entered validated commercial (COTS) IA and IT products. (iii) The products are provided for the availability of systems. (iv) The products ensured the integrity and confidentiality of information and the
investigations and clearances, and facility security. [E-# OR W-#] Identification and Authentication Users) [NIST w/ DHS 4300A IA-8 (4)] [Test: IA-8(4).1 - Use Of Ficam-Issued Profiles] Not Entered Failure to ensure that the information system conforms to FICAM-issued profiles could weaken its security posture, resulting to the ineffectiveness of the identification and authentication policy. High [Test: IA-8(4).1 - Use Of Profiles] Not Entered [E-# OR W-#] System and Communications Protection Policy and Procedures [NIST 800-53 w/ DHS 4300A SC-1 (DHS-5.7.a)] [Test: - Information Assurance Considerations] Not Entered Failure to meet the requirements could lead to ineffectively remediate information security weaknesses: (i) Information Assurance (IA) is considered a requirement for all systems used to input, process, store, display, or transmits sensitive or security information. (ii) IA is achieved through the acquisition and appropriate implementation of evaluated or validated commercial (COTS) IA and IT products. (iii) The products are provided for the availability of systems. (iv) The products ensured the integrity and confidentiality of information and the High [Test: - Information Assurance Considerations] Not Entered
Security%20Assessment%20Report%20Extensible.docx