This Risk Assessment must be completed in addition to the Part 2 for the particular computer operating system in use for this WEB server. Vulnerability and Countermeasure Check List. Mark each as T rue, F alse, or NA - not applicable. In the absence of indications to the contrary, the Information System is operating at an acceptable risk when all of the leftmost countermeasures are marked 'True'.
All administrators have access to the space in which the server is located.
Automated audit logs are maintained for at least 1 year. Auditing is configured to record full db transactions. Logfile analysis is automated and accomplished daily. Reports of anomalous activity are sent automatically to the system administrator. Traffic is encrypted.