2 Part 5: Aisi Volume

"How do you know HBSS is running on this laptop?"

"What is your process for responding to an IDS alert?" aisi volume 2 part 5

Provide a spreadsheet with: Vulnerability name, CVSS score, detection date, remediation date (≤72h), and signed POA&M for any >72h. "How do you know HBSS is running on this laptop

AISI Volume 2, Part 5 is not just a checklist – it’s a continuous risk management framework. Passing the inspection is secondary; maintaining operational security is the primary goal. If you need a specific checklist template (e.g., HBSS or ACAS) or a pre-filled POA&M example, let me know and I can provide those as well. If you need a specific checklist template (e

auditpol /get /category:* | findstr "Success Failure" No failure logons recorded ( Failure missing) – hides brute-force attacks. 3.6. Patch Management Focus: Operating systems and applications.

net accounts secedit /export /cfg secpolicy.inf Look for: MaximumPasswordAge=60 , MinimumPasswordLength=15 . Focus: Handling suspected compromises.