Failure to ensure that the Identification and organization uses only Authentication [Test: IA-8(2).1 - third-party [Test: IA-8(2).1 - Acceptance Of [E-# OR credentials could weaken its Acceptance Of High Credentials] W-#] security posture, resulting to Users) [NIST Credentials] the ineffectiveness of the w/ DHS 4300A Not Entered identification and IA-8 (2)] Not Entered authentication policy. Failure to ensure that the strong preference are to the acquisition of COTS IA and IA-enabled IT products (to be used on systems entering, processing, storing, displaying, or transmitting sensitive information) that have been evaluated and validated, as appropriate, in accordance with the following listed below [Test: Acquisitions [NIST [Test: could leave the system more - COTS [E-# OR 800-53 w/ DHS - COTS exposed to vulnerabilities, High Evaluation] W-#] 4300A SA-4 Evaluation] which an attacker could try to exploit using various vectors Not Entered Not Entered and compromise the system or the data in the system: (i) The NIST FIPS validation program. (ii) The National Security Agency (NSA)/NIST National Information Assurance Partnership (NIAP) Evaluation and Validation Program.
[E-# OR W-#] Identification and Authentication Users) [NIST w/ DHS 4300A IA-8 (2)] [Test: IA-8(2).1 - Acceptance Of Credentials] Not Entered Failure to ensure that the organization uses only third-party credentials could weaken its security posture, resulting to the ineffectiveness of the identification and authentication policy. High [Test: IA-8(2).1 - Acceptance Of Credentials] Not Entered [E-# OR W-#] Acquisitions [NIST 800-53 w/ DHS 4300A SA-4 [Test: - COTS Evaluation] Not Entered Failure to ensure that the strong preference are to the acquisition of COTS IA and IA-enabled IT products (to be used on systems entering, processing, storing, displaying, or transmitting sensitive information) that have been evaluated and validated, as appropriate, in accordance with the following listed below could leave the system more exposed to vulnerabilities, which an attacker could try to exploit using various vectors and compromise the system or the data in the system: (i) The NIST FIPS validation program. (ii) The National Security Agency (NSA)/NIST National Information Assurance Partnership (NIAP) Evaluation and Validation Program. High [Test: - COTS Evaluation] Not Entered
Security%20Assessment%20Report%20Extensible.docx