S 5.8 Monthly security checks of the network

Initiation responsibility: Head of IT Section, IT Security Management

Implementation responsibility: Administrators

The network administrator should perform at least monthly security checks of the network. Some operation systems offer programmes which make automatic checks. An example is the programme SECURITY in the directory SYS:SYSTEM within Novell 3.11 The following parameters are checked:

• Are there any users without a password?

• Are there any users who have not used the network for some time?

• Are there any users whose passwords do not meet the prescribed requirements?

• Which users have the same rights as the supervisor?

Additional controls:

• Are the execution and the results of such security checks being documented?