determines, based on current threat information and ongoing assessment of risk, the subset of auditable events in (i) to be audited within the information system, and the frequency of (or situation requiring) auditing for each identified event. Failure to meet the information security measures of performance requirements listed below could risk the exposure of essential [Test: PM-6.1 - Information information compromising the [Test: PM-6.1 - Information Security Security Measures confidentiality, integrity and [E-# OR Information Security Measures of of Performance availability of the system: High W-#] Measures of Performance] [NIST 800-53 w/ Performance] DHS 4300A PM-6] (i) the organization develops an Not Entered inventory of its information Not Entered systems; and (ii) the organization maintains an inventory of its information systems. Failure to meet access agreements requirements indicated below could lead to [Test: PS-6.1 - Access Access Agreements disclosure of greater amount of [E-# OR [Test: PS-6.1 - Agreements] [NIST 800-53 w/ information: High W-#] Access Agreements] DHS PS-6] Not Entered (i) the organization develops Not Entered and documents access agreements for organizational
determines, based on current threat information and ongoing assessment of risk, the subset of auditable events in (i) to be audited within the information system, and the frequency of (or situation requiring) auditing for each identified event. [E-# OR W-#] Information Security Measures of Performance [NIST 800-53 w/ DHS 4300A PM-6] [Test: PM-6.1 - Information Security Measures of Performance] Not Entered Failure to meet the information security measures of performance requirements listed below could risk the exposure of essential information compromising the confidentiality, integrity and availability of the system: (i) the organization develops an inventory of its information systems; and (ii) the organization maintains an inventory of its information systems. High [Test: PM-6.1 - Information Security Measures of Performance] Not Entered [E-# OR W-#] Access Agreements [NIST 800-53 w/ DHS PS-6] [Test: PS-6.1 - Access Agreements] Not Entered Failure to meet access agreements requirements indicated below could lead to disclosure of greater amount of information: (i) the organization develops and documents access agreements for organizational High [Test: PS-6.1 - Access Agreements] Not Entered
Security%20Assessment%20Report%20Extensible.docx