Draft DNTS Sect L7 - Sample Contractor Test VRTM.xls

Sheet2

Notes

1) ATIS-0900001

2) ATIS-0900101.2013

(1) Resource degradation alerts (e.g., 100% utilization, disk space full, volume full),

(2) Login and logout, successful and unsuccessful,

(3) Account creation/modification and permissions or configuration changes,

(4) Administrator level activities,

(5) Startup/Shutdown of System/Services/processes,

(6) Access to privileged functions (e.g., setting auditable event and intrusion detection devices) including maintenance,

(7) Results from malicious code protection (as capable),

(8) Access control list denials (as capable), and

1) Lock the account for 15 minutes, or

2) Lock the account until released by an administrator,

1) Verifies the correct operation of access controls and auditing functions;

2) Performs this verification upon system start-up, restart, and upon command by an authorized privileged user at least every 90 days;

3) Notifies system and/or security personnel of failed security verification tests; and

1) Restore operation within six seconds (once input power returns to defined parameters), OR

Sheet3