Reports of anomalous activity are sent automatically to the system administrator. All vendor recommended Security-related patches have been applied. The system administrator updates operating system and application patches at least quarterly. Attach the COPS report to the back of this risk assessment. A copy of the written enforced process for establishing, using, and terminating an account for this IS is attached to this risk assessment.
All accounts are password protected.
User passwords are known only by the user. Passwords are at least seven characters in length. Passwords are changed at least once a year. There are no modems connected to this computer. Portmapper is not running.