While the plan is called final it undoubtedly will evolve as a result of a variety of factors, including need and operational experience. There are elements of the plan that should be transparent to users and there are aspects that will have an impact. Improvement of cyber security is planned at several levels. A multi-tier architecture is planned with a perimeter around the Lab and various zones within the Lab. An intrusion detection system has already been purchased and is operating.
Some system management is also possible if desired by the PC user or local system manager.
Perhaps the most important change to be noticed by users will be the need to eliminate clear-text reusable passwords. Their use will be phased out over the next year. For people who come in through the web to the Exchange server, encryption is already automatic. All people with accounts on BNL computers will be required to sign a C omputer Us er Agreement . There is some concern that the perimeter defense may create performance issues although it is scalable.