5 / 11
Pending your approvalAction plan submitted by Tom Okafor on Oct 9 · 1 of 2 approvals received · decision due Oct 13
CAPA-024CorrectiveHighAction plan · in review
Enforce MFA on local privileged console access
Owner TOTom OkaforOpened 2026-09-25 Target close 2026-11-15Response due to CB 2026-10-2516 days open
3/6
Action plan
Current stage| # | Corrective action | Owner | Due | Status |
|---|---|---|---|---|
| A1 | Upgrade the 4 servers to Windows Server 2022 or isolate them behind a jump host | TOTom Okafor | 2026-11-01 | Not started |
| A2 | Deploy Duo Windows Logon with offline MFA to all enclave servers | TOTom Okafor | 2026-11-05 | Not started |
| A3 | Revise PRC-014 with a coverage-reconciliation step against the asset inventory | MLMarcus Lee | 2026-11-08 | Not started |
| A4 | Add "MFA coverage = 100% of enclave hosts" KRI to the dashboard | DWDana Whitfield | 2026-11-10 | Not started |
| A5 | Re-score RSK-039 and update the POA&M entry for 3.5.3 | DWDana Whitfield | 2026-11-15 | Not started |
Effectiveness criteria (measurable)
0 password-only privileged console logons across all enclave hosts for 90 consecutive days (Sentinel query), and 100% Duo coverage on two monthly reconciliations.
Check date 2027-02-15 (+90 days after implementation)
Write-backs (ISO 9001 10.2.1 e–f)
Activity
- PNPriya Natarajan approved the action planOct 10, 09:40Actions cover the method and machine causes. OK.
- TOTom Okafor submitted the action plan for approvalOct 9, 14:12
- MLMarcus Lee commentedOct 8, 16:05Can we link the PRC-014 revision so document control picks it up?
- TOTom Okafor moved Root cause → Action planOct 6, 11:30
- DWDana Whitfield approved the root cause analysisOct 6, 11:28
- TOTom Okafor completed containment (3 of 3 actions)Sep 27, 17:02
- JCJamal Carter raised FND-031 and created this CAPASep 25, 10:15
DW
Your decision: action plan for CAPA-024
Approving moves the CAPA to Implementation and creates 5 tasks. Reject and Request changes need a comment.