V-222617
Application Security and Development Security Technical Implementation Guide
Title
The application must notify the ISSO and ISSM of failed security verification tests.
Description
<VulnDiscussion>If personnel are not notified of failed security verification tests, they will not be able to take corrective action and the unsecure condition(s) will remain. Security function is defined as the hardware, software, and/or firmware of the information system responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based. Security functionality includes, but is not limited to, establishing system accounts, config...
Fix Text (Documentation Requirement)
Configure the application to send notices to the ISSO and ISSM indicating the application failed a verification test.