◆ SpookStack

MISC Doc. #5 Enterprise Security Operations Center ; The new Enterprise Security Operations Center (ESOC), which began operations on October - 22, 2003, is tasked with protecting FBI information systems from external attacks and insider misuse through techniques such as real time network monitoring, intrusion detection, and data auditing. The ESOC is operated by security analysts around the clock. Audits and Reviews To help deter and detect espionage activities, the FBI instituted a number of new audits and reviews We expanded our polygraph program to include all employees who have access to highly sensitive information or who are heading to or returning from a perrnanent overseas assignment. We developed and are implementing a Financial Disclosure Program that will ultimately include all FBI employees and contractors with SCl access. We also enhanced reviews of reinvestigation results for employees with the most sensitive security access. Security Officers The FBI has taken steps to build a Bureau-wide force of full-time, career-track security professionals. An important pan of the security career track will be the new full-time position of Chief Security Officer, who will serve as the senior security representative in each field office and tn each Headquarters division. Security Officers report directly to thelr division head or SAC. Security Education The FBI ts implementing a comprehensive security education, awareness, and training program. FBI employees routinely receive e-mail security updates, and an internal web site now provides regular guidance on security measures, All employees recently took a refresher course on security matters. Security training for new Special Agents has been increased, and an updated security briefing for new employees, task force personnel, and contract personnel is being developed Disaster Recovery Planning Each field office and Headquarters division has developed a plan to ensure continuity of operations in the event of an emergency. Efforts have also been. made to ensure that vital records are secure in such an event. 62 000000401