Failure to ensure that the organization employs an independent assessor or [Test: CA-2(1).1 - Security assessment team to conduct an [Test: CA-2(1).1 - Independent [E-# OR Assessments [NIST assessment of the security Independent High Assessors] W-#] 800-53 w/ DHS controls in the information Assessors] 4300A CA-2 (1)] system could allow certain Not Entered security holes to exist not Not Entered discovered by internal assessment teams. Failure of the organization to use authentication and encryption to protect wireless access to the information [Test: AC-18(1).1 - Wireless Access system could result in [Test: AC-18(1).1 - Authentication And [E-# OR [NIST 800-53 w/ information disclosure by Authentication And High Encryption] W-#] DHS 4300A AC-18 trying to intercept a session that Encryption] (1)] terminates to the system if the Not Entered organization uses Not Entered authentication and encryption to protect wireless access to the information system. Failure to ensure that the information system isolates [Test: SC-3.1 - Security Function [Test: SC-3.1 - security functions from Security Function [E-# OR Isolation [NIST Security Function nonsecurity functions could try High Isolation] W-#] 800-53 w/ DHS Isolation] to exploit using various vectors 4300A SC-3] and compromise the system or Not Entered Not Entered the data in the system Failure to meet the [Test: PE-10.1 - Emergency Shutoff [E-# OR requirements for emergency Emergency Shutoff] [NIST 800-53 w/ High W-#] [Test: PE-10.1 - shutoff listed below could lead DHS 4300A PE-10] Emergency Shutoff] to the compromise of the Not Entered
[E-# OR W-#] Security Assessments [NIST 800-53 w/ DHS 4300A CA-2 (1)] [Test: CA-2(1).1 - Independent Assessors] Not Entered Failure to ensure that the organization employs an independent assessor or assessment team to conduct an assessment of the security controls in the information system could allow certain security holes to exist not discovered by internal assessment teams. High [Test: CA-2(1).1 - Independent Assessors] Not Entered [E-# OR W-#] Wireless Access [NIST 800-53 w/ DHS 4300A AC-18 (1)] [Test: AC-18(1).1 - Authentication And Encryption] Not Entered Failure of the organization to use authentication and encryption to protect wireless access to the information system could result in information disclosure by trying to intercept a session that terminates to the system if the organization uses authentication and encryption to protect wireless access to the information system. High [Test: AC-18(1).1 - Authentication And Encryption] Not Entered [E-# OR W-#] Security Function Isolation [NIST 800-53 w/ DHS 4300A SC-3] [Test: SC-3.1 - Security Function Isolation] Not Entered Failure to ensure that the information system isolates security functions from nonsecurity functions could try to exploit using various vectors and compromise the system or the data in the system High [Test: SC-3.1 - Security Function Isolation] Not Entered [E-# OR W-#] Emergency Shutoff [NIST 800-53 w/ DHS 4300A PE-10] [Test: PE-10.1 - Emergency Shutoff] Failure to meet the requirements for emergency shutoff listed below could lead to the compromise of the High [Test: PE-10.1 - Emergency Shutoff] Not Entered
Security%20Assessment%20Report%20Extensible.docx