<H3>Special Instructions</H3><p> <p>Each ATNA Secure Node or Secure Application runs <b>     <u>one instance</u>    </b> of this test.  For NA2009 Connectathon, if your system has qualified for Supportive testing, you do not need to complete the questionnaire and the interview, but you do need to complete the logging portion of this test.</p> <p>The ATNA profile has specific requirements for secure communication (TLS) and logging. There    are other requirement that describe how you protect and monitor your system. These other    requirements are best addressed with an interview process.</p> <p> A Connectathon Monitor will visit your system and ask questions that are listed in the <i><a href="http://ihewiki.wustl.edu/wiki/images/d/d9/ATNA_Inquisition_Questionnaire_6.doc">ATNA_Inquisition_Questionnaire</a></i>. The goal of the interview/inquisition    is for the Connectathon Monitor to determine if you have met the ATNA requirements for securing    your system.</p> <p>You will save yourself and the monitor valuable time during the connectathon if you complete a    draft of the questions in the form <b>prior</b> to arriving at the connectathon. It is available    at the same time this test is published. You are encouraged to read the form and fill in as much    information as possible in advance of the    Connectathon.  Upload your completed questionnaire into the Kudu tool by selecting Connectathon and then Connectathon Images/CDs/Objects. The link to that page is <em><a href=system_con_object.php>Objects Information</a></em>.  Uploading the form is an indication to the connectathon monitor that you are ready for the interview. </p>  <H3>Description</H3> <p>There are 2 parts to the ATNA Inquisition test:</p><ol start="1" type="1">     <li>      <p> <strong>An oral interview</strong> with a Connectathon Monitor during Connectathon week using      the questions in Section 2 of the ATNA_Inquisition interview form. At the Connectathon, you can      speed up the process greatly by having this form with you at the Connectathon, already printed      with as much information entered as possible. If nothing else, notes to yourself on the      applicability of the Audit messages would help you during the interview process. If you can      fill out the form in advance of the Connectathon, so much the better. </p>     </li>     <li>      <p> <strong>Connectathon Monitor review of Audit Message(s)</strong> sent to a central Audit      Record Repository (the NIST Repository). See details in section 3 of the ATNA_Inquisition form. </p>     </li> </ol><p> Based on the results of this test, the monitor will indicate if he/she believes the system    qualifies as an ATNA Secure Node, the ATNA Secure Application or neither. These results are    recorded in Section 1 of the form and entered into kudu as the results for this test.</p> <H3>Evaluation</H3> <p>The Connectathon Monitor will complete the interview form and mark this test as 'passed' if you    meet the audit requirements for your specific application and successfully send the requested    audit message(s).</p> 