Finalize the implementation of a centralized automated solution for monitoring authorized and unauthorized software and hardware connected to the agency’s network in near real time. Continue ongoing efforts to apply the Track-It!, ForeScout, and KACE solutions.
Questioned Costs
$0
Funds for Better Use
$0
Recommendation Status
Closed
Source UUID
257decb8-faef-4076-ac5d-cb024498df13-4
Recommendation Number
4
Additional Information
Status: Open: Resolved. DNFSB has implemented Qualys, Intune, and Microsoft Defender as hardware/software monitoring platforms. These systems have dashboards which provide a near real time view of hardware and software on the network. Track-It! and KACE have been implemented and their configurations are refined as needed. Device compliance policies, enforced by Microsoft Intune, identify devices (Agency laptops and iPhones) that are not running the current versions of Operating Systems. Only iPhones purchased through Apple Business Manager (formerly DEP) program can be enrolled in Intune, so no unauthorized mobile hardware can connect to DNFSB’s IT resources (no BYOD devices allowed). Users cannot install unauthorized software (all software on iPhones must be approved and installed through Intune; users cannot access the Apple App Store).
Based on actions already taken, DNFSB’s position is that this Recommendation needs to be closed.
Based on actions already taken, DNFSB’s position is that this Recommendation needs to be closed.
Significant Recommendation
Yes