Sys Ops - Mod 5-3a

Vulnerability remediation/mitigation process is to mitigate risk to the AFIN, accomplished by implementing

Will direct tasking Priority and Emergency remediation actions to NOS via three-tiered prioritization model.

_ is a suite of centrally managed DCO tools used to deny adversary actions

Focuses on formally authorizing the sys for opera, Management decision based on residual risk to loss/compromise of data

Creates pre-configured OS images that are compliant with all applicable TCNOs/IAVMs and STIGs.

Site Vulnerability Scan grades are: No concern, Minor Concern, Minimal Concern, Moderate Concern, and Critical Concern

_ efforts use the following content structure to implement assessment and authorization requirements

Culture

Priority and Emergency Actions: Priority (3 days): Test patch for 48 hours

_ will alert NOS/COSs when non-client machines rise above 10%

A _ determines the vulnerabilities present on the network

Config changes to sys, installation of softwarepatches, &/or search for & removal of spec files/tools used for malicpurp

Normal Remediation Actions: 11 days: A two-phased patch testing approach

target all requiring an OS update,unless exempt. The deployment will be made w/a deadline at the end of a 24hr period.

Ensure controls are still effective, monitor for changes, and real time risk analysis

Ensures all sys w/ supp OSs are able to comm w/NOS remediation tls &will work w/NOS VROs for troubles act to ensure conn

AF networks currently use McAfee, which provides services like:

Pt 2 Countermeasures, when tasked by approved order, include, but are not limited to:

Command Cyber Readiness Inspection (CCRI) is a DISA-led formal inspection

DISA grades bases based on the _ of systems with functioning ESS software

616 Operations Center (OC)

CCRI evaluates three overall security areas (Contributing Factors):

CCRI process

Program Management Office (PMO)

NOSs will implement a goal of 95% compliance of vulnerability remediation actions using enterprise tools.

Air Force Enterprise Configuration Management Office(AFECMO)

Once the 95% threshold is met by the NOS/COSs, remediation of remaining assets are the responsibility of the _, _, & _

Priority and Emergency Actions:Emergency (24 hours): Forgo all testing.

Checklists that establish configuration standards for DoD systems

What are the Graded Areas of CCRI?

Gather information regarding organization and system

Capability

A _ is a flaw/weakness in sys sec proced, design,implem, or internal ctrls that cld be used by adversary to breach AFIN

After a grace of 4 hours, the deployment will run not automatically or wait for the next available maintenance window.

690 Network Support Squadron (NSS)/AMAC

Assessment & Authorizations (A&A)

SDC – Desktop Operating Systems & SSC – Server Operating Systems

CCRI is designed to:

Conduct

_ are responsible for monitoring client health and assistingremediation that cannot be remediated via automated tools

CCRI Graded Areas – Contributing Factors are graded as “Pass” or “Fail”

Vulnerabilities will be remediated (e.g., patched) according to network orders and associated timelines

Determine impact levels and potential for CIA loss

target all sys, unless exempt. These are notmand. Administrators, users & PMOs can log onto machines & run the install.

DISA uses the results of the vulnerability scan to determine the site’s _

Base _ are required to populate NOS patch testing groups with at least _ of the total assets.

The NOS/299 NOSS (ANG) are responsible for patching vulnerabilities on:

Systems controlled by a _ will be patched only upon approval of the PMO or system owner.

Directs NOS, NCC/CFP & PMOs to implement Normal vulnerability remediation actions via three-tiered prioritization model

Countermeasures, when tasked by approved order, include, but are not limited to:

Evaluate security controls, polices, and procedures

Execute vulnerability remediation to reduce AFIN risk through theimplementation of approved countermeasures.

AF networks currently use

STIGs