Unit 9 Assignment 1 – Policy Monitoring and Enforcement Strategy
Introduction
This policy establishes minimum practices to ensure the Department of Defense systems and organizations with direct ties to the U.S. Government are in compliance with current directives and requirements. Networks are audited to maintain awareness of the operating environment, to detect indications of security problems, and to ensure systems and networks are used for authorized purposes. Security is a mission critical function of the Department of Defense and its proper execution has a direct impact on all missions and capabilities of the national defense.
Purpose
This policy is issued to:
• Provide a mechanism for improved oversight of organizational information security programs.
• Ensure compliance with the Federal Information Management Security Act (FISMA)
• Comply with Department of Defense IT Security Policy
Scope
This applies to all employees and contractor employees using or operating Department of Defense computer systems, as well as the systems and networks, and to contractor employees providing services to the U.S. Government networks.
Policy
Department of Defense policy requires that monitoring shall be used for the following:
• Individual accountability monitoring shall be used to support employee compliance by providing a log of user actions.
• Intrusion detection monitoring, shall be designed and implemented to record appropriate information to assist with investigation and/or prosecution of the incident.
An audit trail will include information to establish what activity has occurred and who or what led to the infraction. The following represents the events that would provide an acceptable audit trail:
• User login –successful, unsuccessful.
• Service startup and shutdown - successful and unsuccessful.
• User account permission modifications - successful and