Assessment Category: Authorization, Authentication and Audit Question Importance Evaluation Notes, (1= highest (1=Acceptable, including 2= high) 2=Acceptable Mitigation w/ Mitigation, 3= Not Acceptable) How do the authentication controls (identity/password) compare to that used by the campus email system? How do the authorization controls (access) compare to that used by the campus email system? How does account provisioning and deprovisioning compare to that used by the campus email system? How does the audit capability (e.g. logging) compare with the campus email system? How does the capability to detect account compromise (e.g. due to phishing) compare with the campus system? CATEGORY SUMMARY
Assessment Category: Authorization, Authentication and Audit Question Importance (1= highest 2= high) Evaluation (1=Acceptable, 2=Acceptable w/ Mitigation, 3= Not Acceptable) Notes, including Mitigation How do the authentication controls (identity/password) compare to that used by the campus email system? How do the authorization controls (access) compare to that used by the campus email system? How does account provisioning and deprovisioning compare to that used by the campus email system? How does the audit capability (e.g. logging) compare with the campus email system? How does the capability to detect account compromise (e.g. due to phishing) compare with the campus system? CATEGORY SUMMARY
campus_assess_framewrk.docx