Procedure Step:Dial-Up Access
Audit Step:
Determine whether there are employees or contractors who can access application through remote dial-in (If so, obtain the most recent list including what access levels they have). If so, determine the agency's procedures for controlling dial-in access (i.e., authentication, logging, etc...).
Purpose:
To obtain an understanding of application information security controls.

