f3a81e9d_es___Humboldt_State_University__Policy_Title
[Policy #] 8045.500 [Citation] At a minimum, server administrators are required to scan regularly, remediate, and report un-remediated vulnerabilities on critical systems or systems that store protected information within a prescribed timeframe. The risk level of a system determines the frequency at which logs must be reviewed. Risk factors to consider are: Criticality of business process. Information classification associated with the system. Past experience or understanding of system vulnerabilities. System exposure (e.g., services offered to the Internet). [Policy Title] 
Information Asset Monitoring
What are the requirements for storage of Level 1 data? | Information Technology Services - Humboldt State University
Policy Title