(iii) the organization retains individual training records in accordance with the organization-defined time period. Failure of the components to follow established procedures to ensure that paper and Protection of [Test: [Test: electronic outputs from systems Sensitive Paper and - Protection of - Protection containing sensitive [E-# OR Electronic Outputs Sensitive Paper and of Sensitive Paper information are protected could High W-#] [NIST 800-53 w/ Electronic Outputs] and Electronic result in the disclosure of DHS 4300A MP-7 Outputs] critical and sensitive (DHS-4.3.1.f)] Not Entered mission/business information Not Entered that may have been contained in the media. Failure to meet the software requirements listed below could weaken the overall security posture of the system: [Test: CM-11.1 - User-Installed (i) the organization establishes [Test: CM-11.1 - User-Installed [E-# OR Software [NIST organization-defined policies User-Installed High Software] W-#] 800-53 w/ DHS governing the installation of Software] CM-11] software by users; Not Entered (ii) the organization enforces Not Entered software installation policies through organization-defined methods; and, (iii) the organization monitors policy compliance at an
(iii) the organization retains individual training records in accordance with the organization-defined time period. [E-# OR W-#] Protection of Sensitive Paper and Electronic Outputs [NIST 800-53 w/ DHS 4300A MP-7 (DHS-4.3.1.f)] [Test: - Protection of Sensitive Paper and Electronic Outputs] Not Entered Failure of the components to follow established procedures to ensure that paper and electronic outputs from systems containing sensitive information are protected could result in the disclosure of critical and sensitive mission/business information that may have been contained in the media. High [Test: - Protection of Sensitive Paper and Electronic Outputs] Not Entered [E-# OR W-#] User-Installed Software [NIST 800-53 w/ DHS CM-11] [Test: CM-11.1 - User-Installed Software] Not Entered Failure to meet the software requirements listed below could weaken the overall security posture of the system: (i) the organization establishes organization-defined policies governing the installation of software by users; (ii) the organization enforces software installation policies through organization-defined methods; and, (iii) the organization monitors policy compliance at an High [Test: CM-11.1 - User-Installed Software] Not Entered
Security%20Assessment%20Report%20Extensible.docx