All users have been trained in the acceptable use of this network. Users know to contact the IS Security Officer when an incident occurs. All connections for all protocols are recorded. Date and time. Automated audit logs are maintained for at least 1 year.
Logfile analysis is automated and accomplished daily.
Reports of anomalous activity are sent automatically to the network administrator and Information Systems Security Office. Information disclosure . Inadequate Contingency Planning. Have written contingency plan. Contingency plan is tested at least once a year.