Summary: | We are initiating a review of FAA Civil Aviation Security Intelligence System that will focus on the operational controls and security FAA has in place to ensure the integrity, confidentiality, and availability of the computer system. We will address: (1) security planning and system management, including physical separation of the networks, monitoring of data usage, and dissemination and disposal of data; (2) system software and program change controls; (3) access controls, including network access security and personnel background checks to ensure the system is only accessed by authorized individuals; (4) segregation of duties; and (5) service continuity, including disaster recovery planning. |