 |
|
|
Data Security
Level of Data Security Controls
- Logical Access Controls
The System Engineer assigns a default password for all the user ID’s created and all users are requested to change their passwords.
For all the servers and networking equipment, the Systems Engineer assigns a password for Administrator/Supervisor user account. These passwords are documented in a sealed cover and stored in a secure place. The System Engineer changes the password and Administrator/Supervisor user client account every forty days.
The System Administrator sends a Security Request Form (SRF) to change the forgotten password of the user. The Systems Engineer revokes the user password to the default.
Accessible Printing and the client do not disclose their passwords for access to the computer resources to others. Accessible Printing and the client are accountable/responsible for the data provided and any compromise of the account must be reported to the Network Department for resetting/revoking the access privileges.
- Backup of Critical Applications & Data Files
A full backup of the server is done daily by the Systems Engineer on to tape media. Tape media is changed every day in the morning and a record is made in the backup entry file for the status of the backup. For any errors/failures observed, corrective action will be taken and the backup will be manually initiated and entry is made to the backup entry file.
The verification of the data backup is done by randomly restoring the backup files and checking the contents/size in bytes of the restored files. The frequency and the number of verifications of the backup data can vary and there is at least one verification in a month conducted by the Systems Engineer/Networks Manager and the entry is made in the backup entry file.
|
|
|
