Vulnerability Testing was conducted against the operating system and server application. Process for the identification of information appropriate for posting to Web sites and the appropriate security and access controls is attached to this form . All administrators have access to the space in which the server is located. Automated audit logs are maintained for at least 1 year. Auditing is configured to record full web transactions.
Logfile analysis is automated and accomplished daily.
Reports of anomalous activity are sent automatically to the system administrator. A copy of the written process used to review and approve web page content is attached. Traffic is encrypted. Transactions analysis to detect contacts with foreign countries is done daily and automatically. Suspicious foreign connections are reported to the local NCIS supervisory agent.