Speaker
Suzanne Willoughby
(ORNL)
Description
Tracking and Training Staff with Privileged Access
The question of who has privileged access to computer and network devices is a frequently asked. In order to comply with DOE and ORNL Cyber requirements, ORNL has made some improvements this year in tracking and training these staff to include:
• Roles implemented within SAP that identified system administrators
• Training developed and tied to the SAP role
• Development of internal operating procedures
In our final step, data collected from systems is compared against the list of approved and trained system administrators for cleanup and reconciliation.
Primary author
Suzanne Willoughby
(ORNL)