Compliance Inspection: Difference between revisions

Latest revision as of 13:58, 1 August 2018

D-9 Information Technology

Question 01

Has the wing published any supplements or operating instructions, or requested and been granted any waivers to CAPR 120-1?

Is the wing operating under any supplements or operating instructions to CAPR 120-1, and, if so, were they approved IAW this regulation prior to implementation?
Is the wing operating under any waiver to CAPR 120-1 and, if so, were they approved IAW this regulation prior to implementation?

How to verify compliance?

Compare wing’s published supplements/OIs or waivers with those documents posted on the CAP publication website.

Question 02

Does the Wing have an assigned Director of IT or IT

Officer responsible for maintenance, upkeep and compliance with regard to use of all CAP IT assets within their respective units IAW CAPR 120-1 para 2.2.5?

How to verify compliance?

Review duty assignments for the wing within eServices to identify whether the Wing has an assigned Director of IT or IT Officer.

Question 03

Are all wing CAP Internet Operations records current IAW CAPR 120-1 para 5.2.2?

How to verify compliance?

Review the Internet Operations Report and the Organizational Report from Members Reports to determine if all websites are approved and approval dates for Wing websites are within the current fiscal year.

Question 04

Are locally developed web pages dealing with confidential information clearly marked with the warning required by CAPR 120-1 para 9.2.4?

How to verify compliance?

Review representational sample of unit web pages noting whether warning is present when the page is displaying confidential information.

Question 05

Are backups of electronic files made IAW CAPR 120-1 para 11.6?

How to verify compliance?

Review unit’s backup schedule documentation to ensure backups are being completed IAW CAPR 120-1 para 11.6

Question 06

Are the default anti-virus protections enabled on all CAP issued computers IAW CAPR 120-1 para 11.7?

How to verify compliance?

Review a representative sample of locally available CAP issued laptops for current anti-virus software. 
This can found by navigating to the right hand corner of the task bar, 
Locating the anti-virus software icon 
Opening application to identify if services are current and active

@@ Line 2: / Line 2: @@
 === Question 01<br> ===
-Has the wing published any supplements or operating instructions, or requested and been granted any waivers to CAPR 120-1?
+Has the wing published any supplements or operating instructions, or requested and been granted any waivers to [[CAPR 120-1]]?
-# Is the wing operating under any supplements or operating instructions to CAPR 120-1, and, if so, were they approved IAW this regulation prior to implementation?
+# Is the wing operating under any supplements or operating instructions to [[CAPR 120-1]], and, if so, were they approved IAW this regulation prior to implementation?
-# Is the wing operating under any waiver to CAPR 120-1 and, if so, were they approved IAW this regulation prior to implementation?
+# Is the wing operating under any waiver to [[CAPR 120-1]] and, if so, were they approved IAW this regulation prior to implementation?
 How to verify compliance?<br>
-  * Compare wing’s published supplements/OIs or waivers with those documents posted on the CAP publication website.
+  Compare wing’s published supplements/OIs or waivers with those documents posted on the CAP publication website.<br>
 === Question 02<br> ===
 Does the Wing have an assigned Director of IT or IT
-# Officer responsible for maintenance, upkeep and compliance with regard to use of all CAP IT assets within their respective units IAW CAPR 120-1 para 2.2.5?
+# Officer responsible for maintenance, upkeep and compliance with regard to use of all CAP IT assets within their respective units IAW [[CAPR 120-1 Paragraph 2.2.5|CAPR 120-1 para 2.2.5]]?
 How to verify compliance?<br>
-  * Review duty assignments for the wing within eServices to identify whether the Wing has an assigned Director of IT or IT Officer.
+  Review duty assignments for the wing within eServices to identify whether the Wing has an assigned Director of IT or IT Officer.<br>
 === Question 03<br> ===
-# Are all wing CAP Internet Operations records current IAW CAPR 120-1 para 5.2.2?<br>
+# Are all wing CAP Internet Operations records current IAW [[CAPR 120-1 Paragraph 5.2.2|CAPR 120-1 para 5.2.2]]?<br>
 How to verify compliance?<br>
-  * Review the Internet Operations Report and the Organizational Report from Members Reports to determine if all websites are approved and approval dates for Wing websites are within the current fiscal year.<br>
+  Review the Internet Operations Report and the Organizational Report from Members Reports to determine if all websites are approved and approval dates for Wing websites are within the current fiscal year.<br>
 === Question 04<br> ===
-# Are locally developed web pages dealing with confidential information clearly marked with the warning required by CAPR 120-1 para 9.2.4?<br>
+# Are locally developed web pages dealing with confidential information clearly marked with the warning required by [[CAPR 120-1 Paragraph 9.2.4|CAPR 120-1 para 9.2.4]]?<br>
 How to verify compliance?<br>
-  * Review representational sample of unit web pages noting whether warning is present when the page is displaying confidential information.<br>
+  Review representational sample of unit web pages noting whether warning is present when the page is displaying confidential information.<br>
 === Question 05 <br> ===
-# Are backups of electronic files made IAW CAPR 120-1 para 11.6?<br>
+# Are backups of electronic files made IAW [[CAPR 120-1 Paragraph 11.6|CAPR 120-1 para 11.6]]?<br>
 How to verify compliance?<br>
-  * Review unit’s backup schedule documentation to ensure backups are being completed IAW CAPR 120-1 para 11.6<br>
+  Review unit’s backup schedule documentation to ensure backups are being completed IAW [[CAPR 120-1 Paragraph 11.6|CAPR 120-1 para 11.6]]<br>
 === Question 06<br> ===
-# Are the default anti-virus protections enabled on all CAP issued computers IAW CAPR 120-1 para 11.7?<br>
+# Are the default anti-virus protections enabled on all CAP issued computers IAW [[CAPR 120-1 Paragraph 11.7|CAPR 120-1 para 11.7]]?<br>
 How to verify compliance?<br>
-  * Review a representative sample of locally available CAP issued laptops for current anti-virus software.
+  Review a representative sample of locally available CAP issued laptops for current anti-virus software.
-  * This can found by navigating to the right hand corner of the task bar,
+  This can found by navigating to the right hand corner of the task bar,
-  * Locating the anti-virus software icon
+  Locating the anti-virus software icon
-  * Opening application to identify if services are current and active
+  Opening application to identify if services are current and active<br>