Failure to ensure that the information system uses multifactor authentication for Identification and network access to privileged [Test: IA-2(1).1 - Authentication accounts result in [Test: IA-2(1).1 - Network Access To [E-# OR (Organizational ineffective identification and Network Access To High Privileged Accounts] W-#] [NIST 800-53 authentication policy, which Privileged Accounts] w/ DHS 4300A could lead to any attacker or Not Entered (1)] malicious user gaining Not Entered unauthorized access to or elevated privileges on the system or the data. Failure to employ strong authentication protocols to facilitate the monitoring and [Test: Remote Access control of remote access [Test: - Remote [E-# OR [NIST 800-53 w/ methods for PII could result in - Remote High Access of PII] W-#] DHS AC-17 a system breach through Access of PII] (DHS-5.4.1.c)] remote access attack vectors Not Entered that could eventually lead to Not Entered disclosure or compromise of high-level information. Failure to ensure that the DHS gateway Steward provides email monitoring for spam at System and the gateway could result in the [Test: Information [Test: ineffective remediation - Email [E-# OR Integrity Policy and - strategy, which could High Monitoring for Spam] W-#] Procedures [NIST Monitoring for Spam] eventually lead to the loss of 800-53 w/ DHS sensitive information or to the Not Entered SI-1 (DHS-5.4.6.h)] Not Entered disruption of critical DHS functions, services, and operations/processes.
[E-# OR W-#] Identification and Authentication (Organizational [NIST 800-53 w/ DHS 4300A (1)] [Test: IA-2(1).1 - Network Access To Privileged Accounts] Not Entered Failure to ensure that the information system uses multifactor authentication for network access to privileged accounts result in ineffective identification and authentication policy, which could lead to any attacker or malicious user gaining unauthorized access to or elevated privileges on the system or the data. High [Test: IA-2(1).1 - Network Access To Privileged Accounts] Not Entered [E-# OR W-#] Remote Access [NIST 800-53 w/ DHS AC-17 (DHS-5.4.1.c)] [Test: - Remote Access of PII] Not Entered Failure to employ strong authentication protocols to facilitate the monitoring and control of remote access methods for PII could result in a system breach through remote access attack vectors that could eventually lead to disclosure or compromise of high-level information. High [Test: - Remote Access of PII] Not Entered [E-# OR W-#] System and Information Integrity Policy and Procedures [NIST 800-53 w/ DHS SI-1 (DHS-5.4.6.h)] [Test: - Monitoring for Spam] Not Entered Failure to ensure that the DHS gateway Steward provides email monitoring for spam at the gateway could result in the ineffective remediation strategy, which could eventually lead to the loss of sensitive information or to the disruption of critical DHS functions, services, and operations/processes. High [Test: - Email Monitoring for Spam] Not Entered
Security%20Assessment%20Report%20Extensible.docx