Office of the Inspector General information System Security Evaluation of Region IV - Arlington, TX
Report Information
Recommendations
Develop and implement procedures for sending information system backup informationto an offsite location for storage for at least 14 days or as recommended by the agency. The offsite storage location should be in a cabinet or safe that is waterproof and fireproof.
Develop and document a contingency plan for the Region IV seat-managed infrastructureservers.
Develop and document a contingency plan for the Region IV NRC-managed servers.
Develop and document a contingency plan for the Region IV badge access system server.
Evaluate the vulnerabilities identified by the network vulnerability assessment anddevelop a plan and schedule to identify any false positives and to resolve the remainingvulnerabilities.