Mark each as T rue, F alse, or NA - not applicable. In the absence of indications to the contrary, the Information System is operating at an acceptable risk when all of the leftmost countermeasures are marked 'True'. The web site has a clearly defined purpose the supports the mission of the DOD component. Server Application does not create special requirements for clients. Server Application does not use cookies.
Server application collects information on clients.
NSA Security Configuration Guide utilized in configuration of web server. Print out out a copy of the individual checklists available at the end of each chapter in the guide. Complete and attach those sheets to the back of this form. Vulnerability Testing was conducted against the operating system and server application. Process for the identification of information appropriate for posting to Web sites and the appropriate security and access controls is attached to this form .