reporting listed below could lead to the compromise of the system or the misuse of data being processed, transported, or stored inside the system: [Test: IR-7.1 - (i) the organization provides an Incident Response incident response support Assistance] 800-53 w/ DHS Assistance] resource that offers advice and 4300A IR-7] assistance to users of the Not Entered Not Entered information system for the handling and reporting of security incidents; and (ii) the incident response support resource is an integral part of the organization's incident response capability. Failure to meet the requirements for physical access authorizations listed [Test: PE-2.1 - below could lead to the [Test: PE-2.1 - Physical Access compromise of the system or of Physical Access Authorizations] the data in the system: Authorizations] Physical Access Not Entered [E-# OR Authorizations (i) the organization identifies Not Entered High W-#] [NIST 800-53 w/ areas within the facility that are [Test: PE-2.2 - DHS 4300A PE-2] publicly accessible; [Test: PE-2.2 - Physical Access (ii) the organization develops Physical Access Authorizations] and keeps current lists of Authorizations] personnel with authorized Not Entered access to the facility where the Not Entered information system resides (except for those areas within
800-53 w/ DHS 4300A IR-7] [Test: IR-7.1 - Incident Response Assistance] Not Entered reporting listed below could lead to the compromise of the system or the misuse of data being processed, transported, or stored inside the system: (i) the organization provides an incident response support resource that offers advice and assistance to users of the information system for the handling and reporting of security incidents; and (ii) the incident response support resource is an integral part of the organization's incident response capability. Assistance] Not Entered [E-# OR W-#] Physical Access Authorizations [NIST 800-53 w/ DHS 4300A PE-2] [Test: PE-2.1 - Physical Access Authorizations] Not Entered [Test: PE-2.2 - Physical Access Authorizations] Not Entered Failure to meet the requirements for physical access authorizations listed below could lead to the compromise of the system or of the data in the system: (i) the organization identifies areas within the facility that are publicly accessible; (ii) the organization develops and keeps current lists of personnel with authorized access to the facility where the information system resides (except for those areas within High [Test: PE-2.1 - Physical Access Authorizations] Not Entered [Test: PE-2.2 - Physical Access Authorizations] Not Entered
Security%20Assessment%20Report%20Extensible.docx