DokuWiki

You've loaded an old revision of the document! If you save it, you will create a new version with this data.

===== Preparing For A System Audit =====

CeRTNA ERDS workstations must pass a security audit prior to processing production level transactions through the CeRTNA ERDS platform. Per the California DOJ Baseline Security Requirements, CeRTNA ERDS workstations must be used only for CeRTNA ERDS activity. The follow topics are designed to help you prepare your workstation so that it will meet the CeRTNA ERDS audit requirements.

==== Additional Workstation Preparation ====

In addition to the hardware recommendations outlined in the [[erds:hw_os_reqs|Hardware & OS Requirements]] document, CeRTNA ERDS workstations must also have Anti-Virus/Anti-Malware software installed.

== Anti-Virus & Anti-Malware Software ==

For Windows 7 workstations, CeRTNA recommends the installation of Microsoft Security Essentials, however, other software tools are also acceptable, such as Symantec Endpoint Protection. Microsoft Security Essentials can be downloaded for free from the following URL:

[[https://www.microsoft.com/en-us/download/details.aspx?id=5201]]

For Windows 10 workstations, Microsoft Security Essentials is built into the operating system in the form of a product named Windows Defender. As with Windows 7 workstations, other products such as Symantec Endpoint Protection are also acceptable.

== Microsoft Baseline Security Analyzer (MBSA) ==

The CeRTNA ERDS workstation audit will require a clean Microsoft Baseline Security Analyzer (MBSA) report. The Microsoft Baseline Security Analyzer 2.3 (MBSA) software can be downloaded from the following URL:

[[https://admin.certna.org/Downloads/MBSA23x64.zip]]

Once you have downloaded and installed the MBSA software, run the Microsoft Baseline Security Analyzer (MBSA) and scan the ERDS workstation. Resolve any items that are flagged on the MBSA scan.

==== System Audit ====

During your system audit, you will be asked to perform the following tasks as an Administrator to show that the CeRTNA ERDS workstation meets the workstation security configuration requirements:

=== Run/review MSBSA 2.3 output. Validate clean report ===

* __Record output__

=== Validate System Properties ===

Path: Control Panel\System

* Windows 10 operating system with 8.00 GB RAM (minimum)
  * or
  * Windows 7 (x86 or x64) operating system with 4.0 GB RAM (minimum)

* __Record output__

{{page>[:erds:local_system_settings&noheader&noindent&nofooter&nouser&nodate&noeditbtn&nopermalink]}}

=== Microsoft Security Essentials (Win7) or Windows Defender (Win10) ===

{{page>[:erds:anti-virus_settings&noheader&noindent&nofooter&nouser&nodate&noeditbtn&nopermalink]}}

Edit summary

Note: By editing this page you agree to license your content under the following license: CC Attribution-Noncommercial-Share Alike 4.0 International