Instruction: For an External User, write “Not Applicable” in the Sensitivity Level Column. This table must include all roles including systems administrators and database administrators as a role types. (Also include web server administrators, network administrators and firewall administrators if these individuals have the ability to configure a device or host that could impact the CSP service offering.) This table must also include whether these roles are fulfilled by foreign nationals or systems outside the United States. Delete this and all other instructions from your final version of this document. Table 91 Personnel Roles and Privileges Role Internal or Privileged (P), Sensitivity Level Authorized Functions Performed External Non-Privileged Privileges (NP), or No Logical Access (NLA) UNIX System Full Add/remove users and Administrator administrative hardware, install and access (root) configure software, OS updates, patches and hotfixes, perform backups Client Portal Add/remote client users. Administrator administration Create, modify and delete client applications Program N/A Reviews, approves and Director enforces policy There are currently internal personnel and external personnel. Within one year, it is anticipated that there will be internal personnel and external personnel. Instruction: Insert a network architectural diagram in the space that follows. Ensure that the following items are labeled on the diagram: hostnames, Domain Name System (DNS) servers, DHCP servers, authentication and access control servers, directory servers, firewalls, routers,
Instruction: For an External User, write “Not Applicable” in the Sensitivity Level Column. This table must include all roles including systems administrators and database administrators as a role types. (Also include web server administrators, network administrators and firewall administrators if these individuals have the ability to configure a device or host that could impact the CSP service offering.) This table must also include whether these roles are fulfilled by foreign nationals or systems outside the United States. Delete this and all other instructions from your final version of this document. Table 91 Personnel Roles and Privileges Role Internal or External Privileged (P), Non-Privileged (NP), or No Logical Access (NLA) Sensitivity Level Authorized Privileges Functions Performed UNIX System Administrator Full administrative access (root) Add/remove users and hardware, install and configure software, OS updates, patches and hotfixes, perform backups Client Administrator Portal administration Add/remote client users. Create, modify and delete client applications Program Director N/A Reviews, approves and enforces policy There are currently internal personnel and external personnel. Within one year, it is anticipated that there will be internal personnel and external personnel. Instruction: Insert a network architectural diagram in the space that follows. Ensure that the following items are labeled on the diagram: hostnames, Domain Name System (DNS) servers, DHCP servers, authentication and access control servers, directory servers, firewalls, routers,
FedRAMP-SSP-High-Baseline-Template-v1.2.docx