Sys Ops - Mod 5-3a

Priority and Emergency Actions: Priority (3 days): Test patch for 48 hours

DISA grades bases based on the _ of systems with functioning ESS software

Systems controlled by a _ will be patched only upon approval of the PMO or system owner.

Gather information regarding organization and system

Normal Remediation Actions: 11 days: A two-phased patch testing approach

_ are responsible for monitoring client health and assistingremediation that cannot be remediated via automated tools

616 Operations Center (OC)

Directs NOS, NCC/CFP & PMOs to implement Normal vulnerability remediation actions via three-tiered prioritization model

AF networks currently use McAfee, which provides services like:

AF networks currently use

Vulnerability remediation/mitigation process is to mitigate risk to the AFIN, accomplished by implementing

Conduct

The NOS/299 NOSS (ANG) are responsible for patching vulnerabilities on:

Priority and Emergency Actions:Emergency (24 hours): Forgo all testing.

Air Force Enterprise Configuration Management Office(AFECMO)

_ efforts use the following content structure to implement assessment and authorization requirements

690 Network Support Squadron (NSS)/AMAC

Evaluate security controls, polices, and procedures

After a grace of 4 hours, the deployment will run not automatically or wait for the next available maintenance window.

Capability

Ensure controls are still effective, monitor for changes, and real time risk analysis

target all sys, unless exempt. These are notmand. Administrators, users & PMOs can log onto machines & run the install.

CCRI Graded Areas – Contributing Factors are graded as “Pass” or “Fail”

DISA uses the results of the vulnerability scan to determine the site’s _

NOSs will implement a goal of 95% compliance of vulnerability remediation actions using enterprise tools.

Config changes to sys, installation of softwarepatches, &/or search for & removal of spec files/tools used for malicpurp

Creates pre-configured OS images that are compliant with all applicable TCNOs/IAVMs and STIGs.

What are the Graded Areas of CCRI?

_ will alert NOS/COSs when non-client machines rise above 10%

Program Management Office (PMO)

Assessment & Authorizations (A&A)

Site Vulnerability Scan grades are: No concern, Minor Concern, Minimal Concern, Moderate Concern, and Critical Concern

CCRI evaluates three overall security areas (Contributing Factors):

A _ determines the vulnerabilities present on the network

Culture

Focuses on formally authorizing the sys for opera, Management decision based on residual risk to loss/compromise of data

_ is a suite of centrally managed DCO tools used to deny adversary actions

A _ is a flaw/weakness in sys sec proced, design,implem, or internal ctrls that cld be used by adversary to breach AFIN

Once the 95% threshold is met by the NOS/COSs, remediation of remaining assets are the responsibility of the _, _, & _

Base _ are required to populate NOS patch testing groups with at least _ of the total assets.

STIGs

Vulnerabilities will be remediated (e.g., patched) according to network orders and associated timelines

Countermeasures, when tasked by approved order, include, but are not limited to:

target all requiring an OS update,unless exempt. The deployment will be made w/a deadline at the end of a 24hr period.

Will direct tasking Priority and Emergency remediation actions to NOS via three-tiered prioritization model.

Determine impact levels and potential for CIA loss

CCRI process

SDC – Desktop Operating Systems & SSC – Server Operating Systems

Checklists that establish configuration standards for DoD systems

Execute vulnerability remediation to reduce AFIN risk through theimplementation of approved countermeasures.

Pt 2 Countermeasures, when tasked by approved order, include, but are not limited to:

Command Cyber Readiness Inspection (CCRI) is a DISA-led formal inspection

CCRI is designed to:

Ensures all sys w/ supp OSs are able to comm w/NOS remediation tls &will work w/NOS VROs for troubles act to ensure conn