Policy 7230A - Department of Administration

2.2.1.b System Responsibility Individuals
• For all system responsible individuals, capture the following
information:
o Name.
o Title and employing Agency/Department
o Contact information.
2.2.1.c System Security Configuration
• High impact systems should be afforded the highest level of
system protection:
o Systems should be patched and maintained on an at
least weekly basis, or as often as the release of patches
allows.
o System logs should be reviewed on an at least daily
basis.
o Systems should be protected with anti-malware, data
encryption and enhanced authentication solutions.
o Systems should be placed on dedicated network
segments that are provided with access controls,
firewall protection and intrusion detection and
prevention capabilities.
• Medium impact system should be afforded a moderate level
of system protection:
o Systems should be patched and maintained on an at
least monthly basis, or as often as the release of
patches allows.
o System logs should be reviewed on an at least weekly
basis.
o Systems should be protected with anti-malware and
data encryption solutions.
o Systems should be placed on networks that are
provided with perimeter firewall protection and
intrusion detection and prevention capabilities.
• Low impact systems should be afforded a minimal level of
system protection:
o Systems should be patched and maintained on an at
least quarterly basis, or as often as the release of
patches allows.
o System logs should be reviewed on an at least monthly
basis.
o Systems should be protected by anti-malware
solutions.
o Systems should be placed on networks that are
provided perimeter firewall protection.
4