11. Data Retention & Archival [DR]
25
11.1. Policy Objective
25
11.2. Policy & Baseline Controls
25
12. Documentation [DC]
25
12.1. Policy Objective
25
12.2. Policy & Baseline Controls
25
13. Audit & Certification [AC]
26
13.1. Policy Objective
26
13.2. Policy & Baseline Controls
26
C. SECURITY CONTROLS
26
1. Communications Security [CS]
26
1.1. Policy Objective
26
1.2. Policy & Baseline Controls - Cabling
26
1.3. Policy & Baseline Controls - Telephones & Faxes
26
2. Network Security [NS]
27
2.1. Policy Objective
27
2.2. Policy & Baseline Controls - Network Management
27
2.3. Policy & Baseline Controls – Virtual LANs (VLANs)
28
2.4. Policy & Baseline Controls – Multifunction Devices (MFDs)
29
2.5. Policy & Baseline Controls – Domain Name Service (DNS) Servers
29
2.6. Policy & Baseline Controls – Internet Security
29
2.7. Policy & Baseline Controls – E-Mail Security
30
2.8. Policy & Baseline Controls – Wireless Security
30
2.9. Policy & Baseline Controls – Clock Synchronization
31
2.10. Policy & Baseline Controls – Virtual Private Networks (VPNs)
31
2.11. Policy & Baseline Controls – Voice over IP Security (VoIP)
31
2.12. Policy & Baseline Controls – Internet Protocol Version 6
32
3. Information Exchange [IE]
32
3.1. Policy Objective
32
3.2. Policy & Baseline Controls
32
4. Gateway Security [GS]
33
4.1. Policy Objective
33
4.2. Policy & Baseline Controls - General
33
4.3. Policy & Baseline Controls – Data Export
34
4.4. Policy & Baseline Controls – Data Import
35
5. Product Security [PR]
35
5.1. Policy Objective
35
5.2. Policy & Baseline Controls
35
6. Software Security [SS]
36
6.1. Policy Objective
36
6.2. Policy & Baseline Controls – Software Development & Acquisition
36
6.3. Policy & Baseline Controls – Software Applications
36
NATIONAL INFORMATION ASSURANCE MANUAL
12