C
SA.1.6 Net Admin review Accts
SA.1.7 Sys and App Admin and Admin limited access rule
SA.1.8 App Admin review logs
SA.1.9 App Admin review Accts
SA.1.10 Net access req’s doc’d and approved
SA.1.2 Sec Campaign
SA.1.3 Security Audit Controls
SA.1.4 NetAdmin and Admin limited access rule
SA.1.5 Net Admin review logs
SA.1.11 Separation of Duties observed.
SA.1.12 Unique User ID’s Used
SA.1.13 ERP access roles and resp’s
SA.1.1 Sec Policies
SA.1.14 Priv user access limited
SA.1.15 Role changes and access is tracked within 1 week
SA.1.16 Terminated staff account shutdown
SA.3.1 Antivirus Program and service
SA2.1 Net & ERP use good PW’s
SA.2.2 Users propmted to change PW on first login
SA.2.3 PW’s rotated regulary
SA.2.4 Net & ERP use good PW’s
SA.2.5 Failed login attempt lockout level
SA.2.6 Inactivity Logout set
SA.4.1 Network penetration tested
SA4.2 Network IDS used
SA.4.3 App and Net Security Logs reviewed
SA.4.4 FW used to protect network
SA.4.5 Router Rules used to protect WAN and Campus Net’s
SA.4.6 Regular FW review
SA.4.7 Encrypted data only.
SA.5.1 VPN or private circuit used
SA.5.2 Remote access terminates with status change