Introduction › Accountability for Entries

Accountability for Entries

Only an MSCA or SCA should be allowed to select and change control options. The MSCA can elect to allow an operations supervisor, or a divisional or departmental security administrator, to enter control options.

The authorized ACID/password combination allows operations supervisors or CA Top Secret administrators to specify control options, but it will also leave an audit trail that leads directly to the ACID under which the specification was made.

Three basic rules must be followed to allow operators or administrators to enter control options and be held accountable for their entries:

• The ACID must be valid and have the CONSOLE attribute attached to it
• The ACID cannot be expired or suspended at the time that the control option entry is made
• The PASSWORD must be correct and not expired