sanitized using approved equipment, techniques, and procedures. Failure to meet the alternate storage site requirements listed below could lead to the untimely recovery or restoration of system or of data: [Test: CP-6.1 - Alternate Storage [Test: CP-6.1 - Alternate Storage [E-# OR Site [NIST 800-53 (i) the organization establishes Alternate Storage High Site] W-#] w/ DHS 4300A an alternate storage site; and Site] (ii) the organization initiates Not Entered necessary alternate storage site Not Entered agreements to permit the storage and recovery of information system backup information. Failure to ensure that the organization requires the developer of the information system, system component, or information system service to provide organization-defined [Test: SA-16.1 - Developer-Provided [Test: SA-16.1 - training on the correct use and Developer-Provided [E-# OR Training [NIST Developer-Provided operation of the implemented High Training] W-#] 800-53 w/ DHS Training] security functions, controls, 4300A SA-16] and/or mechanisms could result Not Entered Not Entered in the inability to respond properly to an incident, leading to the disruption of critical mission/business functions, operations, and processes.
sanitized using approved equipment, techniques, and procedures. [E-# OR W-#] Alternate Storage Site [NIST 800-53 w/ DHS 4300A [Test: CP-6.1 - Alternate Storage Site] Not Entered Failure to meet the alternate storage site requirements listed below could lead to the untimely recovery or restoration of system or of data: (i) the organization establishes an alternate storage site; and (ii) the organization initiates necessary alternate storage site agreements to permit the storage and recovery of information system backup information. High [Test: CP-6.1 - Alternate Storage Site] Not Entered [E-# OR W-#] Developer-Provided Training [NIST 800-53 w/ DHS 4300A SA-16] [Test: SA-16.1 - Developer-Provided Training] Not Entered Failure to ensure that the organization requires the developer of the information system, system component, or information system service to provide organization-defined training on the correct use and operation of the implemented security functions, controls, and/or mechanisms could result in the inability to respond properly to an incident, leading to the disruption of critical mission/business functions, operations, and processes. High [Test: SA-16.1 - Developer-Provided Training] Not Entered
Security%20Assessment%20Report%20Extensible.docx