reviews/updates; and (iv) the organization reviews/updates audit and accountability procedures in accordance with frequency. Failure to ensure that the Identification and information system uniquely [Test: IA-8.1 - Authentication identifies and authenticates Identification and [Test: IA-8.1 - non-organizational users (or [E-# OR Identification and Organizational processes acting on behalf of High Organizational W-#] Users) [NIST non-organizational users) could Users)] w/ DHS 4300A leave the system vulnerable to IA-8] unauthorized access and Not Entered Not Entered intrusion. Failure to meet the audit storage capacity requirements indicated below could result in lost data, which could prove detrimental to the success of a forensic or audit report: Audit Storage [Test: AU-4.1 - Audit [E-# OR Capacity [NIST [Test: AU-4.1 - Audit Storage Capacity] (i) the organization allocates High W-#] 800-53 w/ DHS Storage Capacity] audit record storage capacity; 4300A AU-4] Not Entered and, Not Entered (ii) the organization configures auditing to reduce the likelihood of audit record storage capacity being exceeded. Failure to meet the privacy [E-# OR Privacy Notice [Test: TR-1.1 - notice requirements listed High W-#] [NIST 800-53 w/ Privacy Notice] [Test: TR-1.1 - below increases the risk to
reviews/updates; and (iv) the organization reviews/updates audit and accountability procedures in accordance with frequency. [E-# OR W-#] Identification and Authentication Users) [NIST w/ DHS 4300A IA-8] [Test: IA-8.1 - Identification and Not Entered Failure to ensure that the information system uniquely identifies and authenticates non-organizational users (or processes acting on behalf of non-organizational users) could leave the system vulnerable to unauthorized access and intrusion. High [Test: IA-8.1 - Identification and Users)] Not Entered [E-# OR W-#] Audit Storage Capacity [NIST 800-53 w/ DHS 4300A AU-4] [Test: AU-4.1 - Audit Storage Capacity] Not Entered Failure to meet the audit storage capacity requirements indicated below could result in lost data, which could prove detrimental to the success of a forensic or audit report: (i) the organization allocates audit record storage capacity; and, (ii) the organization configures auditing to reduce the likelihood of audit record storage capacity being exceeded. High [Test: AU-4.1 - Audit Storage Capacity] Not Entered [E-# OR W-#] Privacy Notice [NIST 800-53 w/ [Test: TR-1.1 - Failure to meet the privacy notice requirements listed below increases the risk to High [Test: TR-1.1 - Privacy Notice] Organizational Organizational
Security%20Assessment%20Report%20Extensible.docx