information, which could lead to the inability to track in a timely manner any attack on the system or data. Failure to meet the media marking requirements listed below could lead to the compromise of the system or of the data in the system: (i) the organization marks removable media and information system output in accordance with organizational [Test: MP-3.1 - Media Marking [E-# OR [Test: MP-3.1 - policies and procedures, Marking] [NIST 800-53 w/ High W-#] Marking] indicating the distribution DHS 4300A MP-3] limitations, handling caveats, Not Entered Not Entered and applicable security markings (if any) of the information; and, (ii) the organization defines removable media types output exempt from marking as long as the exempted items remain within controlled areas designated. Failure to meet the remote access requirements listed [Test: AC-17(4).1 - Remote Access [Test: AC-17(4).1 - below could result in the Privileged Commands [E-# OR [NIST 800-53 w/ Privileged of critical tasks by High / Access] W-#] DHS 4300A AC-17 Commands / Access] users requiring remote access (4)] to resources in the information Not Entered Not Entered system:
information, which could lead to the inability to track in a timely manner any attack on the system or data. [E-# OR W-#] Marking [NIST 800-53 w/ DHS 4300A MP-3] [Test: MP-3.1 - Marking] Not Entered Failure to meet the media marking requirements listed below could lead to the compromise of the system or of the data in the system: (i) the organization marks removable media and information system output in accordance with organizational policies and procedures, indicating the distribution limitations, handling caveats, and applicable security markings (if any) of the information; and, (ii) the organization defines removable media types output exempt from marking as long as the exempted items remain within controlled areas designated. High [Test: MP-3.1 - Media Marking] Not Entered [E-# OR W-#] Remote Access [NIST 800-53 w/ DHS 4300A AC-17 (4)] [Test: AC-17(4).1 - Privileged Commands / Access] Not Entered Failure to meet the remote access requirements listed below could result in the of critical tasks by users requiring remote access to resources in the information system: High [Test: AC-17(4).1 - Privileged Commands / Access] Not Entered
Security%20Assessment%20Report%20Extensible.docx