Office of the Inspector General information System Security Evaluation of Region IV - Arlington, TX
Report Information
Recommendations
Develop and implement procedures for sending information system backup information
to an offsite location for storage for at least 14 days or as recommended by the agency. The offsite storage location should be in a cabinet or safe that is waterproof and fireproof.
Develop and document a contingency plan for the Region IV seat-managed infrastructure
servers.
Develop and document a contingency plan for the Region IV NRC-managed servers.
Develop and document a contingency plan for the Region IV badge access system server.
Evaluate the vulnerabilities identified by the network vulnerability assessment and
develop a plan and schedule to identify any false positives and to resolve the remaining
vulnerabilities.