Failure of the information system to implement spam protection by following the requirements listed below could lead to information disclosure: (i) the organization mploys spam protection mechanisms at [Test: SI-8.1 - Spam Spam Protection [E-# OR [Test: SI-8.1 - Spam information system entry and Protection] [NIST 800-53 w/ High W-#] Protection] exit points to detect and take DHS 4300A SI-8] action on unsolicited messages; Not Entered Not Entered and (ii) the organization updates spam protection mechanisms when new releases are available in accordance with organizational configuration management policy and procedures. Failure to ensure that the organization employs automated tools that provide notification to [Test: SI-7(2).1 - Software and personnel or roles upon [Test: SI-7(2).1 - Automated Information discovering discrepancies [E-# OR Automated Notifications Of Integrity [NIST during integrity verification High W-#] Notifications Of Integrity Violations] 800-53 w/ DHS could result in the untimely Integrity Violations] 4300A SI-7 (2)] remediation of discrepancies Not Entered on/of information system Not Entered functionality, which could eventually lead to the loss of organizational assets or to the
[E-# OR W-#] Spam Protection [NIST 800-53 w/ DHS 4300A SI-8] [Test: SI-8.1 - Spam Protection] Not Entered Failure of the information system to implement spam protection by following the requirements listed below could lead to information disclosure: (i) the organization mploys spam protection mechanisms at information system entry and exit points to detect and take action on unsolicited messages; and (ii) the organization updates spam protection mechanisms when new releases are available in accordance with organizational configuration management policy and procedures. High [Test: SI-8.1 - Spam Protection] Not Entered [E-# OR W-#] Software and Information Integrity [NIST 800-53 w/ DHS 4300A SI-7 (2)] [Test: SI-7(2).1 - Automated Notifications Of Integrity Violations] Not Entered Failure to ensure that the organization employs automated tools that provide notification to personnel or roles upon discovering discrepancies during integrity verification could result in the untimely remediation of discrepancies on/of information system functionality, which could eventually lead to the loss of organizational assets or to the High [Test: SI-7(2).1 - Automated Notifications Of Integrity Violations] Not Entered
Security%20Assessment%20Report%20Extensible.docx