Mark each as T rue, F alse, or NA - not applicable. In the absence of indications to the contrary, the Information System is operating at an acceptable risk when all of the leftmost countermeasures are marked 'True'. All administrators have access to the space in which the server is located. Automated audit logs are maintained for at least 1 year. Auditing is configured to record full db transactions.
Logfile analysis is automated and accomplished daily.
Reports of anomalous activity are sent automatically to the system administrator. Traffic is encrypted. Transactions analysis to detect contacts with foreign countries is done daily and automatically. Suspicious foreign connections are reported to the local NCIS supervisory agent.