All vendor recommended Security-related patches have been applied. The system administrator has used a CD2S-endorsed vulnerability analysis program and corrected all noted vulnerabilities. Attach the analysis report to the back of this risk assessment. All accounts are password protected. User passwords are known only by the user.
Passwords are at least seven characters in length.
Passwords are changed at least once a year. There are no modems connected to this computer. IS does not provide information, by any other method to unauthenticated users, programs etc. Login banner containing an abbreviated version of the organizational acceptable use policy is displayed at logon for each user. Login banner advises users that use is subject to monitoring and that use constitutes consent to monitoring.