complexity failed logins lockouts, password history and other security measures available W in the system: Can your system utilize passwords-This is the UNMH Standard How will passwords be R changed? Data Integrity How do you ensure the confidentiality, integrity, and availability of information collected and utilized by this system? Confidentiality: V Integrity: W Availability: Data Encryption To ensure compliance, endpoint devices and confidential data in motion and at rest must be encrypted to a recommended standard (AES 256, TLS1.1). NIST Standards. Can the system be encrypted with MacAfee encryption software? V Will data at rest be encrypted? W What algorithm is used? Will data in motion be encrypted? What algorithm is used? Security Logging and Monitoring V What type of logs does the system create/transmit? (Syslog W and specialized logs.) Does your system create and V retain system audit logs and Yes No Explain W records to the extent needed to enable the monitoring,
W complexity failed logins lockouts, password history and other security measures available in the system: Can your system utilize passwords-This is the UNMH Standard R How will passwords be changed? Data Integrity How do you ensure the confidentiality, integrity, and availability of information collected and utilized by this system? V W Confidentiality: Integrity: Availability: Data Encryption To ensure compliance, endpoint devices and confidential data in motion and at rest must be encrypted to a recommended standard (AES 256, TLS1.1). NIST Standards. V W Can the system be encrypted with MacAfee encryption software? Will data at rest be encrypted? What algorithm is used? Will data in motion be encrypted? What algorithm is used? Security Logging and Monitoring V W What type of logs does the system create/transmit? (Syslog and specialized logs.) V W Does your system create and retain system audit logs and records to the extent needed to enable the monitoring, Yes No Explain
p392-cybersecurity-plan.docx