Escolar Documentos
Profissional Documentos
Cultura Documentos
Check free hard-drive Check all drives for adequate free space
space
Take appropriate action as specified by site's Standard
Operating
Physical checks of Visually check the equipment for amber lights, alarms, etc.
system
Take appropriate action as specified by site's Standard
Operating
Weekly
Archive Audit logs Archive audit logs to a media device with one year retention
Perform/verify weekly Run or verify that a successful backup of system and data files
backup has been completed
Update Anti-Virus Download and install current Anti-Virus signature files
signature file
Run Anti-Virus scan on Scan all hard-drives using current Anti-Virus signature files
all hard-drives
Check Vendor Websites Check vendor websites such as Microsoft, Sun, HP, Oracle,
for Patch Information etc for new vulnerability information including patches and
hotfixes
Verify Retina Verify system scanned by IAO or NSO using Retina tool to
Vulnerability Scan detect for vulnerabilities
Performed (SCCVI)
Remediate with Citadel Verify Hercules remediation tool is used on system to correct
Hercules remediation vulnerabilities
Tool (SCRI)
Check for Password Perform file search on system checking for documents
Files containing words such as 'password', 'passwd', 'pwd', etc
Perform Wireless Check Check system for wireless devices and access
Check for Unnecessary Check system services for any unnecessary services running
Services
Monthly
Perform Self- Review technology checklist for any changes
Assessment Security
Review
Run current security review tool
Perform/verify monthly Run or verify that a successful backup of system and data files
backup has been completed
Verify User Account Run DumpSec tool to verify user account configuration
Configuration
Annually
Change Service- Work with appropriate application administrator to ensure
Account passwords password changes for service accounts such as database
accounts, application accounts and other service accounts are
implemented
Review appropriate Review appropriate STIGs which are updated annually
Security Technical
Implementation Guides
(STIG)
Participate in STIG Participate in TIMs to exchange information about updated
Technical Interchange STIGs, etc.
Meetings (TIM), when
possible
Review training Review training requirements according to DoD Directive
requirements 8570.1
As Required Test Patches and Hotfixes
Install Patches and Hotfixes
Schedule Downtime for Reboots
Apply OS upgrades and service packs
Create/maintain user and groups accounts
Set user and group security
After system Create Emergency System Recovery Data
configuration changes:
Create new system configuration baseline
Document System Configuration Changes
Review and update SSAA
Update VMS for Asset Changes
Update VMS for IAVMs
Notes Tools References
Windows Event
Viewer
Windows Backup
Tool
Veritas Backup
Software
Microsoft
Management
Console
Performance Log
and Alerts
Task Manager
System Monitor
Microsoft Operations
Manager
Disk Defragmenter
Disk Management
Disk Quotas
Windows Backup
Tool
Veritas Backup
Software
Unix Tripwire
Disk Defragmenter
Error-checking tool
Device Manager
Windows Time
Service
Tools - Unix
/Windows
NTP
eEye Retina
Scanner
Citadel Hercules
Remediation Tool
Tools - UNIX
DISA FSO Scripts
eEye Retina
Scanner
Citadel Hercules
Remediation Tool
John-the-Ripper
L0phtCrack
Tools - UNIX
Crack
Tools available on
DISA FSO Gold
Disk (Windows) and
Windows Backup
and Recovery Tool
Veritas Backup
Software