cfISAC.org     Central Florida Industrial Security Awareness Council   

         

Latest News: Information Systems Security

DSS Posts Trusted Downloading Guidance

The DSS Information Assurance page has been updated to include DSS sanctioned procedures for trusted downloading.  Visit DSS Information Assurance for more information.

More Auditing Help

Below you will find a list of Windows Event IDs that are commonly seen during a technical audit using Event Viewer.  These codes should help explain success and failure events that are showing up in your audits.  Remember -  Don't just collect also inspect!

Windows Audit Event IDs

Warning Banner Software

This zip file contains software to
place the DoD banner on MS Windows Operating systems (95, 98, NT, 2000).

Download Now

Trusted Downloading Exercise

Test your trusted downloading skills with Jerry Bagley's training material on Trusted Downloading "Hidden Insight".  If you can find all of the hidden material, I'll eat my hat!

NEW- FAISSR Update Version 4.0 for new Chapter 8

You want it.  You need it.  So here it is in DRAFT form.  The newest FAISSR plan is designed as a template to meet the requirements of new Chapter 8 to the NISPOM.  Now into Version 4

The Florida Association of Information Systems Security Representatives publishes their latest version plan for  Non-Standalone systems.  This Zip file includes a host of resources for implementing the security requirements of new Chapter 8 to the NISPOM.  Simply download the package and tailor the plan and profile to your system!  

Download the Version 4 Zip Package for Multi User & Non-Standalones


Check out Sandy Patton's briefing on how to implement the FAISSR plan.

Implementing the FAISSR Plan PowerPoint briefing

Default Passwords

Check out the following site for a list of all the default passwords for operating systems. 
http://www.phenoelit.de/dpl/dpl.html

Type 1 NSA Devices

 NISPOM Chapter 8 requires NSA approved Type 1 devices be used for data transmission.  There is not a listing of these devices accessible electronically. However, there is a hard copy or CD-ROM of INFORMATION ASSURANCE PRODUCTS CATALOG dated 2001 which can be obtained by calling NSA Help Desk at 800-688-6115, option 3. NSA will mail or FEDEX as requested.

Free Information Assurance Training Products

Free Information Assurance Training Products (multi-media CDs and video tapes) on a variety of subjects are available at DISA.  Titles like "Introduction to DITSCAP", "Windows NT Security", "Operational Information Systems Security", and may more can be ordered at http://iase.disa.mil.  Enter the site, then select Free IA Training Products. 


FAISSR

The Florida Automated Information Systems Security Representative Council meets quarterly to present and discuss topics on Information Systems Security.  If you are interested in attending the meetings please contact Wanda Williams.

 


Training

Information System Security Representatives (ISSR) should take the Automated Information Systems for Industry Course given each month by the Defense Security Service.

Click here to see the schedule

Click for instruction to ENROL