How are the actual assignments of roles and rules verified according to established security and auditing procedures?
Individuals have specific roles that limit them to the data they enter or have specific rights to address. Actual assignments of roles and rules are established for ATR in its MIS System Security Plan that addresses such areas as how ATR employees are granted system access based upon their organizational role and need to know, authorizing officials, technical aspects of authentication management, software use and engineering, and the auditing of access files to ensure the protection of data maintained by ATR. The use of JMD-mandated tools for security configuration compliance enables this verification, including, for example, whether guest/anonymous accounts are disabled and identifiers are unique. 8.6 What auditing measures and technical safeguards are in place to prevent misuse of data? The following in-place auditing measures and technical safeguards are applied to prevent misuse of data. ATR constantly evaluates new technologies and procedures to enhance these capabilities. These c
