In addition, HHS has an obligation to protect the privacy and security of personal data. Malicious software has the potential to cause harm to an organization through the modification, destruction, or release of information or processing resources, and the denial of critical services. Traditional computer safeguards and malware detection efforts play important roles in the implementation of an organization s malicious software prevention strategy. However, all organizations with Internet access are now more vulnerable to viruses. As information systems grow in complexity, effective security safeguards must evolve.
Security is enforced through a combination of technical and traditional management methods.
This policy applies to all existing automated systems and to any new systems technology acquired after the effective date of this policy. This policy applies to all operating system environments. HHS will assure that its systems and data are safe and secure from unauthorized access that might lead to the alteration, damage, or destruction of automated resources and data, unintended release of data, and denial of service. Users shall be trained about the possibility of viruses and other malicious code, on the use of virus scanning tools, about their responsibilities for regularly using these scanning tools, and how to handle and report suspected or actual viral infections. Users shall be informed about the procedures for detecting viruses and limiting the spread of infection.