Skip to content
ATO Pathways
  Log In

III - Administrative Sensitive

Rules and Groups employed by this XCCDF Profile

  • FN-03.01.02

    <GroupDescription></GroupDescription>
    Group
    Show

  • Foreign National (FN) System Access - FN or Immigrant Aliens (not representing a foreign government or entity) with LAA Granted Uncontrolled Access

    &lt;VulnDiscussion&gt;Failure to verify citizenship and proper authorization for access to either sensitive or classified information could enable ...
    Rule High Severity
    Show

  • FN-04.01.01

    <GroupDescription></GroupDescription>
    Group
    Show

  • Foreign National (FN) Physical Access Control - Areas Containing US Only Information Systems Workstations/Monitor Screens, Equipment, Media or Documents

    &lt;VulnDiscussion&gt;Physically co-locating REL Partners or other FN - who have limited or no access to the SIPRNet or other US Classified systems...
    Rule High Severity
    Show

  • FN-04.03.01

    <GroupDescription></GroupDescription>
    Group
    Show

  • Foreign National (FN) Physical Access Control - (Identification Badges)

    &lt;VulnDiscussion&gt;Failure to limit access to information visible on system monitor screens in mixed US/FN environments can result in FN personn...
    Rule Low Severity
    Show

  • FN-05.01.01

    <GroupDescription></GroupDescription>
    Group
    Show

  • Foreign National (FN) Administrative Controls - Proper Investigation and Clearance for Access to Classified Systems and/or Information Assurance (IA) Positions of Trust

    &lt;VulnDiscussion&gt;Failure to validate that FN partners or employees have the required security clearance levels for access to classified system...
    Rule High Severity
    Show

  • FN-05.02.01

    <GroupDescription></GroupDescription>
    Group
    Show

  • Foreign National (FN) Administrative Controls - Written Procedures and Employee Training

    &lt;VulnDiscussion&gt;Failure to limit access for Foreign Nationals to classified information can result in the loss or compromise of NOFORN inform...
    Rule Medium Severity
    Show

  • FN-05.02.02

    <GroupDescription></GroupDescription>
    Group
    Show

  • Foreign National (FN) Administrative Controls - Procedures for Requests to Provide Foreign Nationals System Access

    &lt;VulnDiscussion&gt;Unauthorized access by foreign nationals to Information Systems can result in, among other things, security incidents, compro...
    Rule Medium Severity
    Show

  • FN-05.03.01

    <GroupDescription></GroupDescription>
    Group
    Show

  • Foreign National (FN) Administrative Controls - Contact Officer Appointment

    &lt;VulnDiscussion&gt;Failure to provide proper oversight of Foreign National partners or employees and limit access to classified and sensitive in...
    Rule Low Severity
    Show

  • IA-01.03.01

    <GroupDescription></GroupDescription>
    Group
    Show

  • Information Assurance - System Security Operating Procedures (SOPs)

    &lt;VulnDiscussion&gt;Failure to have documented procedures in an SOP could result in a security incident due to lack of knowledge by personnel ass...
    Rule Low Severity
    Show

  • IA-02.02.01

    <GroupDescription></GroupDescription>
    Group
    Show

  • Information Assurance - COOP Plan and Testing (Not in Place for Information Technology Systems or Not Considered in the organizational Holistic Risk Assessment)

    &lt;VulnDiscussion&gt;Failure to develop a COOP and test it periodically can result in the partial or total loss of operations and INFOSEC. A conti...
    Rule Medium Severity
    Show

  • IA-02.03.01

    <GroupDescription></GroupDescription>
    Group
    Show

  • Information Assurance - COOP Plan or Testing (Incomplete)

    &lt;VulnDiscussion&gt;Failure to develop a COOP and test it periodically can result in the partial or total loss of operations and INFOSEC. A conti...
    Rule Low Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules