The agency has not updated the Circular to accommodate overlapping responsibilities among the organizational components. Consequently, network connectivity and modem usage issues have not been properly addressed by the agency. All areas are not using modem pools and dialback controls. A modem pool enables efficient call routing and provides enhanced security. Other standard controls such as firewalls, line suppression and LAN audit tools are not being used.
Firewalls provide a barrier between the agency's computer network and the Internet.
Line suppression prevents identification of agency modem lines by potential intruders. Further, several agency LANs do not utilize anti-virus software. Updated anti-virus software is a standard control to prevent the viral infection of PCs and LANs. The agency has not established a formal virus response team. A virus response team includes individuals within the agency prepared to deal with computer viruses.