All Inetd TCP Services have TCPwrappers with access control lists. The access control files deny all services to all computers and then permit access only to hosts that require access, and only to the necessary services. Automated audit logs are maintained for at least 1 year. Auditing is configured to record backups. Date and time.
Logfile analysis is automated and accomplished daily.
Reports of anomalous activity are sent automatically to the system administrator. All vendor recommended Security-related patches have been applied. The system administrator updates operating system and application patches at least quarterly. Attach the COPS report to the back of this risk assessment. A copy of the written enforced process for establishing, using, and terminating an account for this IS is attached to this risk assessment.