FYI. Begin forwarded message:

From: "Kwiatkowski, Matthew A." <[email protected]> Date: February 25, 2011 3:18:42 PM CST To: "[email protected]" <[email protected]> Subject: INFO: IG Audit for ANL

All,

Well it looks like we didn't dodge all the audit bullets. Cyber this week, received notification of an IG audit to be executed in the near future. The Cyber Office has a call-in scheduled for Monday afternoon with the IG to get more specific information, including dates. The potential scope is a full General systems audit including a vulnerability (scanning) assessment. When we have more information, I will be sure to pass that along to you. Since this is a full scope audit, the potential for any division to be included is a possibility. What can you do to help?

1. Address open High and Med. Vulns in scavenger

2. Validate patches have been deployed for software

3. High level validation of security controls (AV is up to date, Warning banner, GPO's, etc.)

4. Have you been keeping up with divisional document review/refresh (if applicapble)?

CSPO will keep you informed. Thank you for your diligence!

--

Matt Kwiatkowski M.S.I.S.

Cyber Operations Lead

Argonne Cyber Security Program Office

Argonne National Laboratory

http://www.anl.gov <http://www.anl.gov/>

9700 South Cass Avenue

Bldg 240 Office 4110

Argonne, IL 60439

[email protected]

Phone (630) 252-6465

Fax (630) 252-9689

HEALTH WARNING: Care should be taken when lifting this e-mail, since its mass, and thus its weight, is dependent on its velocity relative to the user.