Planning Emergency Procedures › Multiple Super ACIDs

Multiple Super ACIDs

You can define a series of emergency ACIDs, possibly by production application, or you can define just one for all production emergencies. The more precisely you define your emergency ACIDs, the easier it is to monitor the abnormal, audited, or violation activity.

• Clearly define and explain all appropriate emergency ACIDs to your operations staff so that they are prepared for any production emergency.
• Restrict the use of these ACIDs to off-hours through date and time controls. This discourages misuse of the emergency ACIDs for non-emergency situations.
• Monitor the emergency ACID reports to determine whether the use of the ACID is legitimate.
• Research the cause of the unexpected violation to ascertain that it was not a deliberate attempt by someone outside of the operations area to bypass CA Top Secret. This is possible if the use of production emergency ACIDs is common knowledge.
• Operations staff should be responsible for the use of these ACIDs and should be held accountable for their misuse.
• Do not allow a user who is disgruntled or near termination to use an emergency ACID.