Job Management Partner 1/Client Security Control Description, User's Guide and Operator's Guide

4.7.1 Guides for security level judgment standards

There are 4 security levels. The following table lists guides for which security levels to set when setting a judgment policy.

Table 4-5 Guides for security levels and judgment standards

No.	Security level#	Judgment standard guide
1	Danger	Indicates a threat that could spread damage across the system if not handled immediately, with impact as significant as stoppage of operations.
2	Warning	Indicates that normal operation may be affected if the vulnerable client is not handled appropriately.
3	Caution	Indicates that normal operation is not likely affected, but measures should be taken to prevent effects on the system.
4	Safe	Indicates that no measures are necessary.

#

The Danger, Warning, and Caution security levels can be set as a judgment items.

Organization of this subsection

(1) Security levels setting guides for each judgment item

(1) Security levels setting guides for each judgment item

The following table lists guides for setting security levels for a given judgment condition.

Table 4-6 Security levels setting guide for each judgment item

No.	Judgment item		Judgment condition	Guide for security level settings
1	Security updates#1		The latest security update has not been applied.	Warning
2			A security update specified by the administrator has not been applied.	Warning
3	Anti-virus products		No anti-virus product has been installed.	Danger
4			No anti-virus product is running.	Danger
5			The version of the virus definition file is old.	Danger
6			The engine version of the anti-virus product is old.	Danger
7	Prohibited software		Software prohibited by the administrator is installed.	Caution
8	Mandatory software		Software required by the administrator is not installed.	Caution
9	PC security settings	Accounts#2	A Guest account is set up.	Warning
10			A Guest account is set up and active.	Warning
11		Passwords	An account with a vulnerable password exists.	Warning
12			An account has a password that never expires.	Warning
13			A password has not been changed within the number of days specified by the administrator.	Warning
14		Logon	Automatic logon is enabled.	Warning
15			Power-on password is not set.#3	Warning
16			Power-on password is not set or not installed.#3	Warning
17		Shares	A shared folder is set up on the client.	Warning
18		Anonymous connections	Anonymous connections are not restricted.	Warning
19		Services	Unnecessary services are running.	Warning
20		Firewall#4	Windows firewall is disabled.	Warning
21			Windows firewall is disabled or allows exceptions.	Warning
22		Automatic updates	Windows automatic update is disabled.	Warning
23		Screensaver	No screensaver is set.	Caution
24			Screensaver is not password-protected.	Caution
25		Drive encryption#5	The system drive is not encrypted.	Caution
26			A drive is not encrypted.	Caution
27	User definition		A user-defined security setting specified by the administrator has not been implemented.	Caution

#1

For a security update, select either of the two judgment conditions.

#2

For an account, select either of the two judgment conditions.

#3

For power-on passwords, select either of the two judgment conditions.

#4

For a firewall, select either of the two judgment conditions.

#5

For drive encryption, select either of the two judgment conditions.

[Contents][Back][Next]

All Rights Reserved. Copyright (C) 2009, 2011, Hitachi, Ltd.
Copyright, patent, trademark, and other intellectual property rights related to the "TMEng.dll" file are owned exclusively by Trend Micro Incorporated