◆ SpookStack

Enterprise Security Operations Center The new Enterprise Security Operations Center (ESOC), which began operations on October 22, 2003, Is tasked with protecting FBI information systems from external attacks and insider misuse through techniques such as real time network monitoring, intrusion detection, and cata auditing. The ESOC 1s operated by security analysts around the clock. Audits and Reviews To help deter and detect espionage activities, the FBI instituted a number of new audits and i} reviews We expanded our polygraph program to include all enployees who have access to 1 highly sensitive information or who are heading to or returning from a permanent overseas assignment. We developed and are implementing a Financial Disclosure Program that will ultimately include all FBI employees and contractors with SCI access. We also enhanced reviews of reinvestigation results for employees with the most sensitive security access. 1 Security Officers , The FBI has taken steps to build a Bureau-wide force of full-time, career-track security i professionals. An important pari of the security career track will be the new full-time position H of Chief Security Officer, who will serve as the senior security representative in each field office a and in each Headquarters division. Security Officers report directly to their division head or | SAC. i i. Security Education fs The FBI ts implementing a comprehensive security education, awareness, and training program. : FBI employees routinely receive e-mail security updates, and an internal web site now provides i regular guidance on security measures. All employees recently took a refresher course on 4 security matters. Security training for new Special Agents has been increased, and an updated security briefing for new employees, task force personnel, and contract personnel is being i developed ; Disaster Recovery Planning Each field office and Headquarters division has developed a plan to ensure continuity of operations in the event of an emergency. Efforts have also been made to ensure that vital ° records are secure in such an event. ‘| misc Doc. #5 62 000000401