Logfile analysis is automated and accomplished daily. Reports of anomalous activity are sent automatically to the system administrator. All vendor recommended Security-related patches have been applied. The system administrator has used a CD2S-endorsed vulnerability analysis program and corrected all noted vulnerabilities. Attach the analysis report to the back of this risk assessment.
All accounts are password protected.
User passwords are known only by the user. Passwords are at least seven characters in length. Passwords are changed at least once a year. There are no modems connected to this computer. IS does not provide information, by any other method to unauthenticated users, programs etc.