Failure to meet session lock requirements indicated below could enable an attacker to try and break into the system by hijacking the idle session: (i) the organization defines the [Test: AC-11.1 - Session Lock [NIST [E-# OR [Test: AC-11.1 - time period of user inactivity Session Lock] 800-53 w/ DHS High W-#] Session Lock] after which the information 4300A AC-11] system initiates a session lock; Not Entered Not Entered and, (ii) the information system retains the session lock until the user reestablishes access using established identification and authentication procedures. Failure to ensure that the information system automatically the information system down, restarts the information system, or implements [Test: SI-7(5).1 - Software and [Test: SI-7(5).1 - security safeguards Automated Response Information [E-# OR Automated Response when integrity violations are To Integrity Integrity [NIST High W-#] To Integrity discovered could result in the Violations] 800-53 w/ DHS Violations] untimely remediation of 4300A SI-7 (5)] discrepancies on/of information Not Entered Not Entered system functionality, which could eventually lead to the loss of organizational assets or to the disruption of critical mission/business functions,
[E-# OR W-#] Session Lock [NIST 800-53 w/ DHS 4300A AC-11] [Test: AC-11.1 - Session Lock] Not Entered Failure to meet session lock requirements indicated below could enable an attacker to try and break into the system by hijacking the idle session: (i) the organization defines the time period of user inactivity after which the information system initiates a session lock; and, (ii) the information system retains the session lock until the user reestablishes access using established identification and authentication procedures. High [Test: AC-11.1 - Session Lock] Not Entered [E-# OR W-#] Software and Information Integrity [NIST 800-53 w/ DHS 4300A SI-7 (5)] [Test: SI-7(5).1 - Automated Response To Integrity Violations] Not Entered Failure to ensure that the information system automatically the information system down, restarts the information system, or implements security safeguards when integrity violations are discovered could result in the untimely remediation of discrepancies on/of information system functionality, which could eventually lead to the loss of organizational assets or to the disruption of critical mission/business functions, High [Test: SI-7(5).1 - Automated Response To Integrity Violations] Not Entered
Security%20Assessment%20Report%20Extensible.docx