Implementing and Administering an Multilevel Secure System › Determine Who Administers MLS
Determine Who Administers MLS
The MLS administrator performs all security‑related functions for the MLS environment in CA Top Secret. The MLS administrator:
- Delegates MLS administrative authority
- Selects what to classify with a security label based on implementation of the security policy as defined for the organization and the plans agreed on by the implementation team
- Defines security levels
- Defines categories
- Defines security labels
- Activates security classifications
- Assigns security labels to users
- Assigns security labels to objects
- Establishes the MLS environment options
- Configures software to run in an MLS environment
- Activates MLS
- Reclassifies users and objects
- Monitors MLS
- Audits MLS
- Traces SAF requests for MLS-related events
- Uses ISPF panels to administer MLS
- Uses TSS commands to administer MLS
The MSCA or an SCA acid with the MLSADMIN authority in their acid has the authority to perform all of the above MLS functions. Because the powers are unlimited, the MLS administrator must be a highly trusted individual.
Copyright © 2010 CA Technologies.
All rights reserved.
|
|