NSA Security Configuration Guide utilized in configuration of web server. Print out out a copy of the individual checklists available at the end of each chapter in the guide. Complete and attach those sheets to the back of this form. Vulnerability Testing was conducted against the operating system and server application. Process for the identification of information appropriate for posting to Web sites and the appropriate security and access controls is attached to this form .
All administrators have access to the space in which the server is located.
Automated audit logs are maintained for at least 1 year. Auditing is configured to record full web transactions. Logfile analysis is automated and accomplished daily. Reports of anomalous activity are sent automatically to the system administrator. A copy of the written process used to review and approve web page content is attached.