...

The Security Team is responsible to ensure regular auditing of this policy and automates this when possible. However, responsible does not always mean executing every audit on their own. This is a group endeavor among all the NCSA service providers and requires coordination and cooperation between ADS, ITS and Security.

...

Violation

Violations of this policy may result in immediate disconnection of systems by the Security Team, especially in critical and sensitive zones. Failure to obtain prior approval for installations based on zone policies or attempts to circumvent these policies will be reported to senior management at the NCSA.

...

Exceptions Process

For the purposes of this document, production systems are defined as any system, to include allocated systems, intended to provide reliable computational and/or data services to a networked constituency. These systems include not only “customer facing” hosts, such as webservers, file servers, login nodes, etc., but also the infrastructure required to support these systems, such as backend database servers, backup and storage systems, authentication servers, etc.

Exceptions Process

any rule or policy, exceptions may be needed. The Security Office will review requests for exceptions. Decisions will be made by the Security Office after appropriate consultation with ADS and ITS leadership. Appeals to decisions can be made to the Director's Office.

Policy Maintenance

The Security Office will review this policy annually with the leadership of ADS and ITS to see if changes are needed. It will also be updated as needed for new network environments that are neededFor any rule or policy, there are likely to be rare exceptions. The NCSA Security Operations team will review and requests sent to them for an exception, and the NCSA CSO will decide whether or not an exception or alternate course of action will be made in response to a request. Appeals to decisions can be made to the Director's Office.

...

Zone 0: ACB (Academic Computing Building)

...