Software] disclosure of critical DHS information. Not Entered Not Entered Failure to ensure contingency Contingency capabilities for DHS systems [Test: Planning Policy and [Test: could result in the continued - DHS [E-# OR Procedures [NIST - DHS operation of the system, risking Contingency High W-#] 800-53 w/ DHS Contingency further loss or damage, or the Guidance] CP-1 Guidance] removal of the system, causing functional outage for all Not Entered Not Entered authorized users. Failure to meet the requirements of accepting PIV credentials listed below could result in providing any account access to critical or sensitive information: Identification and (i) the information system [Test: IA-2(12).1 - Authentication accepts and electronically [Test: IA-2(12).1 - Acceptance Of PIV [E-# OR (Organizational verifies Personal Identity Acceptance Of PIV High Credentials] W-#] Users) [NIST Verification (PIV) credentials; Credentials] w/ DHS 4300A (ii) the organization Not Entered IA-2 (12)] implements logical access Not Entered control systems (LACS) and physical access control systems (PACS); and, (iii) the organization conforms to federal requirements when enabling agency-wide use of PIV credentials. [E-# OR Cryptographic Key Failure to ensure that a human [Test: High W-#] Establishment and sponsor represented each - Authorized
Software] Not Entered disclosure of critical DHS information. Not Entered [E-# OR W-#] Contingency Planning Policy and Procedures [NIST 800-53 w/ DHS CP-1 [Test: - DHS Contingency Guidance] Not Entered Failure to ensure contingency capabilities for DHS systems could result in the continued operation of the system, risking further loss or damage, or the removal of the system, causing functional outage for all authorized users. High [Test: - DHS Contingency Guidance] Not Entered [E-# OR W-#] Identification and Authentication (Organizational Users) [NIST w/ DHS 4300A IA-2 (12)] [Test: IA-2(12).1 - Acceptance Of PIV Credentials] Not Entered Failure to meet the requirements of accepting PIV credentials listed below could result in providing any account access to critical or sensitive information: (i) the information system accepts and electronically verifies Personal Identity Verification (PIV) credentials; (ii) the organization implements logical access control systems (LACS) and physical access control systems (PACS); and, (iii) the organization conforms to federal requirements when enabling agency-wide use of PIV credentials. High [Test: IA-2(12).1 - Acceptance Of PIV Credentials] Not Entered [E-# OR W-#] Cryptographic Key Establishment and Failure to ensure that a human sponsor represented each High [Test: - Authorized
Security%20Assessment%20Report%20Extensible.docx