Document Initial and Ongoing Compliance of E-mail Servers

Version: 1.1.1
Last Updated: 1/19/06
University Computing and Communications Services

Procedure

Updates
The spreadsheet must be updated by the administrator whenever the email service configuration changes. Documented changes include non-automatic updates, such as patches, or operating system upgrades. If a configuration specification is automatically maintained (such as virus definitions), it is not necessary to update the spreadsheet every time the item changes.
Semiannual Internal Management Reviews
On a semiannual basis, University Computing and Communications Services (UCCS) will remind administrators to perform an internal management review of their email system(s) in order to update, if needed, their email server configuration spreadsheet(s) to the address indicated. UCCS will confirm the information recorded on the spreadsheet for each server and conduct other reviews as necessary to ensure the email server is secure and its configuration complies with the Email System Acceptable Use and Security Policy.
Correction of Identified Policy Noncompliance and Other Security Issues
UCCS will notify administrators of any non compliance with the Email System Acceptable Use and Security Policy or other security issues identified with their systems. Administrators will correct noncompliance or security issues within 30 calendar days of notification and notify UCCS when completed. UCCS will confirm correction of the issues.

If you have questions, or need assistance, please contact the Help Center (404) 413-HELP (4357)
help@gsu.edu, http://www.gsu.edu/help.