termination of an individual could risk data being Not Entered compromised by such individuals. Failure to ensure that the alternate processing site is configured to support the Alternate minimum required information [Test: CP-7(4).1 - Processing Site [E-# OR [Test: CP-7(4).1 - system operational capability Preparation For Use] [NIST 800-53 w/ High W-#] Preparation For Use] and is ready to use as the DHS 4300A CP-7 operational site could lead to Not Entered (4)] Not Entered the inability to restore business operations/processes in a timely fashion. Failure to ensure that the information system routes organization-defined internal communications traffic to [Test: SC-7(8).1 - organization-defined external Boundary [Test: SC-7(8).1 - Route Traffic To networks through authenticated [E-# OR Protection [NIST Route Traffic To Authenticated Proxy proxy servers at managed High W-#] 800-53 w/ DHS Authenticated Proxy Servers] interfaces could permit an 4300A SC-7 (8)] Servers] attacker or a malicious user to Not Entered gain unauthorized access to the Not Entered system or data and could risk the loss of critical mission/business assets. Failure to ensure that the [Test: IR-4(4).1 - Incident Handling organization correlates incident Information [E-# OR [NIST 800-53 w/ information and individual [Test: IR-4(4).1 - High Correlation] W-#] DHS 4300A IR-4 incident responses to achieve Information (4)] an organization-wide Correlation] Not Entered perspective on incident
Not Entered termination of an individual could risk data being compromised by such individuals. [E-# OR W-#] Alternate Processing Site [NIST 800-53 w/ DHS 4300A CP-7 (4)] [Test: CP-7(4).1 - Preparation For Use] Not Entered Failure to ensure that the alternate processing site is configured to support the minimum required information system operational capability and is ready to use as the operational site could lead to the inability to restore business operations/processes in a timely fashion. High [Test: CP-7(4).1 - Preparation For Use] Not Entered [E-# OR W-#] Boundary Protection [NIST 800-53 w/ DHS 4300A SC-7 (8)] [Test: SC-7(8).1 - Route Traffic To Authenticated Proxy Servers] Not Entered Failure to ensure that the information system routes organization-defined internal communications traffic to organization-defined external networks through authenticated proxy servers at managed interfaces could permit an attacker or a malicious user to gain unauthorized access to the system or data and could risk the loss of critical mission/business assets. High [Test: SC-7(8).1 - Route Traffic To Authenticated Proxy Servers] Not Entered [E-# OR W-#] Incident Handling [NIST 800-53 w/ DHS 4300A IR-4 (4)] [Test: IR-4(4).1 - Information Correlation] Failure to ensure that the organization correlates incident information and individual incident responses to achieve an organization-wide perspective on incident High [Test: IR-4(4).1 - Information Correlation] Not Entered
Security%20Assessment%20Report%20Extensible.docx