Failure to ensure that the organization correlates information from audit records with information obtained from Audit Review, [Test: AU-6(6).1 - monitoring physical access to Analysis, and [Test: AU-6(6).1 - Correlation With [E-# OR enhance the ability to identify Reporting [NIST Correlation With High Physical Monitoring] W-#] suspicious, inappropriate, 800-53 w/ DHS Physical Monitoring] unusual, or malevolent activity 4300A AU-6 (6)] Not Entered could prevent the proper Not Entered implementation of standard audit requirements and protocols. Failure of the organization to obtain alternate telecommunications services that do not share a single point [Test: CP-8(2).1 - [Test: CP-8(2).1 - of failure with primary Single Points Of [E-# OR Services [NIST Single Points Of telecommunications services High Failure] W-#] 800-53 w/ DHS Failure] could leave the system 4300A CP-8 (2)] unavailable or inaccessible Not Entered Not Entered when either the primary or the alternate telecommunications service is down. Failure to ensure that the information system monitors [Test: SI-4(4).1 - inbound and outbound [Test: SI-4(4).1 - Inbound And Information System communications traffic Inbound And Outbound [E-# OR Monitoring [NIST organization-defined frequency Outbound High Communications W-#] 800-53 w/ DHS for unusual or unauthorized Communications Traffic] 4300A SI-4 (4)] activities or conditions could Traffic] result in the inability to detect Not Entered any attack on, intrusion of or Not Entered unusual/unauthorized use of the
[E-# OR W-#] Audit Review, Analysis, and Reporting [NIST 800-53 w/ DHS 4300A AU-6 (6)] [Test: AU-6(6).1 - Correlation With Physical Monitoring] Not Entered Failure to ensure that the organization correlates information from audit records with information obtained from monitoring physical access to enhance the ability to identify suspicious, inappropriate, unusual, or malevolent activity could prevent the proper implementation of standard audit requirements and protocols. High [Test: AU-6(6).1 - Correlation With Physical Monitoring] Not Entered [E-# OR W-#] Services [NIST 800-53 w/ DHS 4300A CP-8 (2)] [Test: CP-8(2).1 - Single Points Of Failure] Not Entered Failure of the organization to obtain alternate telecommunications services that do not share a single point of failure with primary telecommunications services could leave the system unavailable or inaccessible when either the primary or the alternate telecommunications service is down. High [Test: CP-8(2).1 - Single Points Of Failure] Not Entered [E-# OR W-#] Information System Monitoring [NIST 800-53 w/ DHS 4300A SI-4 (4)] [Test: SI-4(4).1 - Inbound And Outbound Communications Traffic] Not Entered Failure to ensure that the information system monitors inbound and outbound communications traffic organization-defined frequency for unusual or unauthorized activities or conditions could result in the inability to detect any attack on, intrusion of or unusual/unauthorized use of the High [Test: SI-4(4).1 - Inbound And Outbound Communications Traffic] Not Entered
Security%20Assessment%20Report%20Extensible.docx