Explain any two Advanced System Securities measures which you can apply to High Criticality Systems.

Advanced System Security Measures define the security measures that must be applied to High Criticality systems. The requirements are: I. Audit and Accountability Enable process auditing or accounting: Enable process auditing or accounting, which generates log information about the creation of new processes and their system activity. Audit privilege escalation or change in privilege: Generate a log message whenever a user changes their level of privilege. Audit firewall denial: Generate a log message when the host-based firewall denies a network connection. Audit all significant application events: Log all significant application events. Write audit events to a separate system: System logs must be written to a remote system in such a way that they cannot be altered by any user on the system being logged. II. Configuration and Maintenance Follow advanced vendor security recommendations: This document cannot be comprehensive for all systems and applications available. Conform to best practices and recommendations outlined in vendor security whitepapers and documentation. Host-based and network-based firewalls: Systems must be protected by both a host-based and a network-based firewall that allows only those incoming connections necessary to fulfill the business need of that system. Configuration management process: Configuration changes must be regulated by a documented configuration and change management process. Partitioning: Systems may share hardware and resources only with other systems that have similar security requirements, regardless of their criticality classification. Systems which share similar security requirements have user communities of similar size and character, similar firewall profiles, and similar technical requirements. For example: Multiple systems of the same Criticality may be aggregated together to share hardware and resources provided they have similar security requirements. High Criticality systems may share hardware and resources with Medium and Low Criticality systems provided that all systems meet these Advanced Systems Security Measures, and share similar security requirements. III. Additional Requirements Physical access: The system must reside in a secured, managed data center.