unauthorized access to the system or data and could risk Not Entered the loss of critical DHS assets. Failure to ensure that the information sent outside the dhs.gov domain is encrypted [Test: Use of [Test: could allow an attacker or a - Cryptography [E-# OR - malicious user to perform Unencrytped Email [NIST 800-53 w/ High W-#] Unencrytped Email information flooding types of Usage] DHS 4300A SC-13 Usage] denial of service attacks, which (DHS-5.4.6.k)] could lead to the compromise Not Entered Not Entered of the system or of the data in the system. Failure to meet the requirements for configuration settings listed below could lead to the compromise of the system or of the data in the system: [Test: Least Functionality [Test: (i) the organization does not - Remote [E-# OR [NIST 800-53 w/ - Remote authorize Remote Desktop High Desktop Connections] W-#] DHS 4300A CM-7 Desktop connections (e.g. Microsoft's (DHS-5.4.5.f)] Connections] Remote Desktop Protocol) to Not Entered any DHS computer without Not Entered using secure authentication tools; and (ii) the organization, upon authorizing RDP connections to any DHS computer, uses any
Not Entered unauthorized access to the system or data and could risk the loss of critical DHS assets. [E-# OR W-#] Use of Cryptography [NIST 800-53 w/ DHS 4300A SC-13 (DHS-5.4.6.k)] [Test: - Unencrytped Email Usage] Not Entered Failure to ensure that the information sent outside the dhs.gov domain is encrypted could allow an attacker or a malicious user to perform information flooding types of denial of service attacks, which could lead to the compromise of the system or of the data in the system. High [Test: - Unencrytped Email Usage] Not Entered [E-# OR W-#] Least Functionality [NIST 800-53 w/ DHS 4300A CM-7 (DHS-5.4.5.f)] [Test: - Remote Desktop Connections] Not Entered Failure to meet the requirements for configuration settings listed below could lead to the compromise of the system or of the data in the system: (i) the organization does not authorize Remote Desktop connections (e.g. Microsoft's Remote Desktop Protocol) to any DHS computer without using secure authentication tools; and (ii) the organization, upon authorizing RDP connections to any DHS computer, uses any High [Test: - Remote Desktop Connections] Not Entered
Security%20Assessment%20Report%20Extensible.docx